In the Linux kernel, the following vulnerability has been resolved:
bpf: fix check for attempt to corrupt spilled pointer
When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slot_type[7], not slot_type[0].
To avoid the need to remember and double-check this in the future, just use is_spilled_reg() helper.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headers | Apr 26, 2024 | Feb 23, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.75-99.163Upgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfo | Feb 17, 2025 | Feb 23, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Jun 3, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Jul 1, 2024 | Feb 23, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Feb 23, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade kernel-rt-livepatchUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade kernel-debugUpgrade dtb-caviumUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-zfcpdump | Mar 13, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1057-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-laptop-23.10Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-5.15.0-1060-azureUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-intel | Mar 12, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub