Linux Kernel BPF Per-CPU Element Lookup Vulnerability in Sleepable Programs

A vulnerability exists in the Linux kernel's BPF (Berkeley Packet Filter) subsystem, specifically within the 'bpf_map_lookup_percpu_elem()' helper function. This function is available for sleepable BPF programs, but when the BPF Just-In-Time (JIT) compilation is disabled or on 32-bit hosts, the function is not inlined. As a result, using it in a sleepable BPF program can trigger a warning, since the program only holds the 'srcu_read_lock_trace' lock. The vulnerability has been addressed by adding a check to ensure proper lock handling.

Impact

The vulnerability could lead to improper lock management in sleepable BPF programs, potentially causing synchronization issues or other unintended behaviors.