Linux Kernel Stack-Based Buffer Overflow Vulnerability in BPF Event Handling

A stack-based buffer overflow vulnerability has been identified in the Linux kernel's BPF event handling, specifically within the 'perf' subsystem. This issue arises from an incorrect parameter invocation in the 'perf_output_begin' function, which leads to memory overwriting. The vulnerability was reported by syzkaller as a KASAN (Kernel Address Sanitizer) issue, indicating stack-out-of-bounds access. The problem originates when 'perf_event_bpf_output' improperly converts small-sized data into large-sized data, causing memory corruption in the event processing pipeline.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or other severe consequences, such as privilege escalation.