CyberRota Analysis
AI-GeneratedA use-after-free vulnerability exists in the Linux kernel's BPF subsystem, specifically in the bpf_trampoline_multi_attach_free function, which can lead to potential exploitation if the bpf_trampoline_update fails during an update. This flaw allows for the possibility of executing arbitrary code due to improper memory management, affecting systems that utilize BPF for tracing and monitoring. Organizations using vulnerable Linux kernel versions should prioritize patching this issue to mitigate risks associated with potential exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure When bpf_trampoline_update() fails before modify_fentry_multi()/ unregister_fentry_multi() is called, cur_image is unchanged (cur_image == old_image) and ftrace still calls into it. Freeing old_image in that case causes a UAF. Only free old_image when it differs from cur_image.