Threats tagged 'ghsa-jrm7-h4fx-vpxv'

A vulnerability in the Linux kernel's BPF subsystem was resolved by adding a missing access_ok call to the copy_user_syms function. The issue involved using __get_user without a prior access_ok call on a user space pointer, which could lead to improper memory access. This flaw has been fixed in affected Linux kernel versions. The vulnerability is rated medium severity and no known exploits are reported in the wild.