Conversation

Surprised and disappointed that this wasn't found earlier. Wasn't the whole point of BPF that the JIT was small enough to thoroughly audit?
Quote Tweet
[CVE-2021-29154] Linux kernel incorrect computation of branch displacements in BPF JIT compiler can be abused to execute arbitrary code in Kernel mode openwall.com/lists/oss-secu
5
140