A vulnerability in the Linux kernel that allows privilege escalation via BPF
Information has been published about a vulnerability (CVE-2020-8835) in the Linux kernel, which was used in the Pwn2Own 2020 competition during the demonstration of a breach in Ubuntu. The vulnerability allowed a non-privileged user to gain root access. A working exploit exists but has not yet been published. The vulnerability is present in the eBPF subsystem, which allows handlers for tracing, performance analysis of subsystems, and traffic management to be executed within the kernel in a special virtual […
