Threats tagged 'ghsa-2m7j-g554-hf69'

A vulnerability in the Linux kernel's BPF subsystem involves improper copying of per-CPU map value padding in the copy_map_value_long() function. This flaw can cause stale heap data from padding bytes to be returned to user space during certain UAPI lookup operations and BPF iteration on per-CPU maps. The issue arises because the copy operation uses the unrounded map value size, omitting tail padding bytes that may contain leftover heap data. The vulnerability has been resolved by adjusting the copy to include the full rounded size, ensuring all padding bytes are copied properly.