In the Linux kernel, the following vulnerability has been resolved:
riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
We get the size of the trampoline image during the dry run phase and allocate memory based on that size. The allocated image will then be populated with instructions during the real patch phase. But after commit 26ef208c209a ("bpf: Use arch_bpf_trampoline_size"), the `im` argument is inconsistent in the dry run and real patch phase. This may cause emit_imm in RV64 to generate a different number of instructions when generating the 'im' address, potentially causing out-of-bounds issues. Let's emit the maximum number of instructions for the "im" address during dry run to fix this problem.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-50-lowlatency-64k | Dec 13, 2024 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub