In the Linux kernel, the following vulnerability has been resolved:
bpf: Protect against int overflow for stack access size
This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail.
This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 9, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | May 19, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-source-azure | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-1010-azure | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub