Threats tagged 'ghsa-xwmh-p524-56rv'

A vulnerability in the Linux kernel's BPF subsystem related to sysctl value replacement was resolved. The issue involved the bpf_sysctl_set_new_value() helper not appending a NUL terminator after replacing a sysctl value, which could lead to out-of-bounds memory access by downstream parsers. This was confirmed by a kernel address sanitizer (KASAN) report indicating slab-out-of-bounds reads. The fix appends a terminating NUL byte to the replacement buffer, restoring expected sysctl semantics and preventing the out-of-bounds access.