In the Linux kernel, the following vulnerability has been resolved:
bpf: Protect against int overflow for stack access size
This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail.
This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Oct 9, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 19, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-default-baseUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-livepatch-devel | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-genericUpgrade linux-image-lowlatency | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub