Linux Kernel cBPF Program Mitigation Vulnerability for Unprivileged Users

A vulnerability in the Linux kernel's handling of cBPF programs has been addressed. Previously, support for eBPF programs loaded by unprivileged users was generally disabled, allowing only cBPF programs to be executed. This vulnerability specifically affected cBPF programs loaded by unprivileged users, as privileged users could load the same programs via eBPF, rendering the mitigation ineffective.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of cBPF programs by unprivileged users, potentially allowing them to perform actions or access resources that should be restricted.