CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel, specifically related to the bpf_lsm_task_to_inode and bpf_lsm_inet_conn_established functions, which cannot be utilized by sleepable Linux Security Module (LSM) programs due to their execution context. This limitation can lead to potential bypasses of security controls, allowing unauthorized access or manipulation of system resources. Organizations using Linux-based systems, particularly those implementing custom LSMs, should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks bpf_lsm_task_to_inode() is called under rcu_read_lock() and bpf_lsm_inet_conn_established() is called from softirq context, so neither hook can be used by sleepable LSM programs.