Summary
Incorrect verifier pruning in BPF in some versions of Linux Kernel may lead to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.
Products Potentially Affected
|
OS/Product
|
Exposure
|
|
Switch Engine (EXOS)
|
Yes
|
Repair Recommendations
Switch Engine (EXOS):
- Fixed in 31.7.4.2-patch1-6 and later.
- Fixed in 33.5.1 and later.
- Fixed in 32.7.3.15-patch1-33 and later.
Please see the full security advisory notice here for more details and future updates.
