In the Linux kernel, the following vulnerability has been resolved:
bpf: fix check for attempt to corrupt spilled pointer
When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slot_type[7], not slot_type[0].
To avoid the need to remember and double-check this in the future, just use is_spilled_reg() helper.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perf-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-livepatch-5.15.148-97.158Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade bpftool | Apr 26, 2024 | Feb 23, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade perf-debuginfo | Feb 17, 2025 | Feb 23, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 3, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Jul 1, 2024 | Feb 23, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | Feb 23, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-default | Mar 13, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.5Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1060-azureUpgrade linux-image-azure-cvmUpgrade linux-image-virtualUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-oem-20.04c | Mar 12, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub