Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-43838

bpf: fix overflow check in adjust_jmp_off()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the insn->imm field for all overflow check, which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case, not the general jump instruction case. Fix it by using insn->off for overflow check in the general case.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5337ac4c9b807bc46baa0713121a0afa8beacd70 to < 345652866a8869825a2a582ee5a28d75141f184aaffected
  • 5337ac4c9b807bc46baa0713121a0afa8beacd70 to < 4a04b4f0de59dd5c621e78f15803ee0b0544eeb8affected
  • e47a1a791d32bd6c8f71d23c84294f2c053553a1affected
  • 6.9.8 to < 6.10affected

Linux Linux

Default version status: affected

  • 6.10affected
  • 0 to < 6.10unaffected
  • 6.10.3 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References