In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overloading of MEM_UNINIT's meaning Lonial reported an issue in the BPF verifier where check_mem_size_reg() has the foll…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overloading of MEM_UNINIT's meaning Lonial reported an issue in the BPF verifier where check_mem_size_reg() has the following code: if (!tnum_is_const(reg->var_off)) /* For unprivileged variable accesses, disable raw * mode so that the program is required to * initialize all the memory that the helper could * just partially fill up. */ meta = NULL; This means…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/43f4df339a4d375bedcad29a61ae6f0ee7a048f8
- https://git.kernel.org/stable/c/48068ccaea957469f1adf78dfd2c1c9a7e18f0fe Patch
- https://git.kernel.org/stable/c/54bc31682660810af1bed7ca7a19f182df8d3df8 Patch
- https://git.kernel.org/stable/c/8ea607330a39184f51737c6ae706db7fdca7628e Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
Timeline
- nvd_ingest NVD