title: bpf: Use correct permission flag for mixed signed bounds arithmetic
description: In the Linux kernel, the following vulnerability has been resolved:
bpf: Use correct permission flag for mixed signed bounds arithmetic
We forbid adding unknown scalars with mixed signed bounds due to the
spectre v1 masking mitigation. Hence this also needs bypass_spec_v1
flag instead of allow_ptr_leaks.
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 2c78ee898d8f, lessThan: 4f3ff11204ea, status: affected, versionType: git
version: 2c78ee898d8f, lessThan: 4ccdc6c6cae3, status: affected, versionType: git
version: 2c78ee898d8f, lessThan: 960114839252, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 5.8, status: affected
version: 0, lessThan: 5.8, status: unaffected, versionType: custom
version: 5.10.32, lessThanOrEqual: 5.10.*, status: unaffected, versionType: custom
version: 5.11.16, lessThanOrEqual: 5.11.*, status: unaffected, versionType: custom
version: 5.12, lessThanOrEqual: *, status: unaffected, versionType: original_commit_for_fix
}
