In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix masking negation logic upon negative dst register
The negation logic for the case where the off_reg is sitting in the dst register is not correct given then we cannot just invert the add to a sub or vice versa. As a fix, perform the final bitwise and-op unconditionally into AX from the off_reg, then move the pointer from the src to dst and finally use AX as the source for the original pointer arithmetic operation such that the inversion yields a correct result. The single non-AX mov in between is possible given constant blinding is retaining it as it's not an immediate based operation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.232-176.381Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfo | May 28, 2024 | Feb 27, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2024 |
| Suse | — | Upgrade kernel-preemptUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-develUpgrade kernel-default | Aug 9, 2024 | Feb 27, 2024 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-aws-fipsUpgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-raspi-5.4Upgrade linux-hwe-5.4Upgrade linux-gcpUpgrade linux-raspiUpgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-oracle-5.4Upgrade linuxUpgrade linux-gkeopUpgrade linux-awsUpgrade linux-aws-hweUpgrade linux-azure-fips | Nov 19, 2024 | Feb 27, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub