In the Linux kernel, the following vulnerability has been resolved:
riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
We get the size of the trampoline image during the dry run phase and allocate memory based on that size. The allocated image will then be populated with instructions during the real patch phase. But after commit 26ef208c209a ("bpf: Use arch_bpf_trampoline_size"), the `im` argument is inconsistent in the dry run and real patch phase. This may cause emit_imm in RV64 to generate a different number of instructions when generating the 'im' address, potentially causing out-of-bounds issues. Let's emit the maximum number of instructions for the "im" address during dry run to fix this problem.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-gke | Dec 13, 2024 | Aug 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub