CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's BPF (Berkeley Packet Filter) subsystem, specifically in the `bpf_cpumask_populate()` function, which improperly handles cpumask pointers, potentially allowing unauthorized write access to memory. This flaw could lead to stability issues or exploitation by malicious actors to manipulate kernel behavior. System administrators and developers working with Linux kernel modules or BPF should prioritize addressing this vulnerability to ensure system integrity and security.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Require a BPF cpumask for bpf_cpumask_populate() bpf_cpumask_populate() writes to its destination with bitmap_copy(), but the destination is typed as struct cpumask *. That allows the verifier to accept borrowed cpumask pointers returned by read-only kfuncs, such as scx_bpf_get_online_cpumask(), as a writable destination. Make the destination a struct bpf_cpumask * so populate follows the same ownership rule as the other mutating cpumask kfuncs. Query kfuncs continue to accept const struct cpumask * inputs.