Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-35903

x86/bpf: Fix IP after emitting call depth accounting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: x86/bpf: Fix IP after emitting call depth accounting Adjust the IP passed to `emit_patch` so it calculates the correct offset for the CALL instruction if `x86_call_depth_emit_accounting` emits code. Otherwise we will skip some instructions and most likely crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b2e9dfe54be4d023124d588d6f03d16a9c0d2507 to < 3f9d57c771656bfd651e22edcfdb5f60e62542d4affected
  • b2e9dfe54be4d023124d588d6f03d16a9c0d2507 to < 81166178cf0a0062a22b1b3b5368183d39577028affected
  • b2e9dfe54be4d023124d588d6f03d16a9c0d2507 to < 9d98aa088386aee3db1b7b60b800c0fde0654a4aaffected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.6.26 to ≤ 6.6.*unaffected
  • 6.8.5 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References