[PATCH vulns 1/3] add a .vulnerable id for CVE-2024-53099

[PATCH vulns 1/3] add a .vulnerable id for CVE-2024-53099

[Shung-Hsi Yu]

The issue is present since the inroduction of BPF link abstraction with
commit 70ed506c3bbc "bpf: Introduce pinnable bpf_link abstraction".

Signed-off-by: Shung-Hsi Yu <shung-hsi.yu@suse.com>
---
 cve/published/2024/CVE-2024-53099.vulnerable | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 cve/published/2024/CVE-2024-53099.vulnerable

diff --git a/cve/published/2024/CVE-2024-53099.vulnerable b/cve/published/2024/CVE-2024-53099.vulnerable
new file mode 100644
index 000000000..3a7ce7976
--- /dev/null
+++ b/cve/published/2024/CVE-2024-53099.vulnerable
@@ -0,0 +1 @@
+70ed506c3bbcfa846d4636b23051ca79fa4781f7
-- 
2.50.1

[PATCH vulns 2/3] add a .vulnerable id for CVE-2023-52735

[Shung-Hsi Yu]

Jakub mentioned the vulnerable commit being c5d2177a72a1 ("bpf, sockmap:
Fix race in ingress receive verdict with redirect to self") in the
syzbot thread that found this issue (see link).

Link: https://lore.kernel.org/all/87k021m8an.fsf@cloudflare.com/
Signed-off-by: Shung-Hsi Yu <shung-hsi.yu@suse.com>
---
 cve/published/2023/CVE-2023-52735.vulnerable | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 cve/published/2023/CVE-2023-52735.vulnerable

diff --git a/cve/published/2023/CVE-2023-52735.vulnerable b/cve/published/2023/CVE-2023-52735.vulnerable
new file mode 100644
index 000000000..d7bac065f
--- /dev/null
+++ b/cve/published/2023/CVE-2023-52735.vulnerable
@@ -0,0 +1 @@
+c5d2177a72a1659554922728fc407f59950aa929
-- 
2.50.1

[PATCH vulns 3/3] add a .vulnerable id for CVE-2023-52920

[Shung-Hsi Yu]

This commit is not necessarily where the issues were actually
introduced, but given backtracking is required for BPF verifier to be
mislead to prune an unsafe execution path, this is a lower barrier to
denote that no older versions can be affected.

Cc: Tao Lyu <tao.lyu@epfl.ch>
Signed-off-by: Shung-Hsi Yu <shung-hsi.yu@suse.com>
---
 cve/published/2023/CVE-2023-52920.vulnerable | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 cve/published/2023/CVE-2023-52920.vulnerable

diff --git a/cve/published/2023/CVE-2023-52920.vulnerable b/cve/published/2023/CVE-2023-52920.vulnerable
new file mode 100644
index 000000000..bc723ccd5
--- /dev/null
+++ b/cve/published/2023/CVE-2023-52920.vulnerable
@@ -0,0 +1 @@
+b5dc0163d8fd78e64a7e21f309cf932fda34353e
-- 
2.50.1

Re: [PATCH vulns 1/3] add a .vulnerable id for CVE-2024-53099

[Greg Kroah-Hartman]

On Tue, Jul 29, 2025 at 04:18:22PM +0800, Shung-Hsi Yu wrote:
> The issue is present since the inroduction of BPF link abstraction with
> commit 70ed506c3bbc "bpf: Introduce pinnable bpf_link abstraction".
> 
> Signed-off-by: Shung-Hsi Yu <shung-hsi.yu@suse.com>
> ---
>  cve/published/2024/CVE-2024-53099.vulnerable | 1 +
>  1 file changed, 1 insertion(+)
>  create mode 100644 cve/published/2024/CVE-2024-53099.vulnerable
> 
> diff --git a/cve/published/2024/CVE-2024-53099.vulnerable b/cve/published/2024/CVE-2024-53099.vulnerable
> new file mode 100644
> index 000000000..3a7ce7976
> --- /dev/null
> +++ b/cve/published/2024/CVE-2024-53099.vulnerable
> @@ -0,0 +1 @@
> +70ed506c3bbcfa846d4636b23051ca79fa4781f7
> -- 
> 2.50.1
> 
> 

All now applied, thanks!

greg k-h