In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsLearn about Arbitrary Command Injection vulnerabilities in an interactive lesson.
Start learningUpgrade Rocky-Linux:8
perf-debuginfo
to version 0:4.18.0-372.9.1.el8 or higher.
This issue was patched in RLSA-2022:1988
.
Note: Versions mentioned in the description apply only to the upstream perf-debuginfo
package and not the perf-debuginfo
package as distributed by Rocky-Linux
.
See How to fix?
for Rocky-Linux:8
relevant fixed versions and status.
BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.