In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction (jump) history to record instruction…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction (jump) history to record instructions that performed register spill/fill to/from stack, regardless if this was done through read-only r10 register, or any other register after copying r10 into it *and* potentially adjusting offset. To make this work reliably, we push extra per-instruction flags into instruction history, encoding stac…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/199f0452873741fa4b8d4d88958e929030b2f92b
- https://git.kernel.org/stable/c/41f6f64e6999a837048b1bd13a2f8742964eca6b Mailing List
- https://git.kernel.org/stable/c/e4da60feca4d35e1a9b03dc0affa3354f9ff45e4
- https://git.kernel.org/stable/c/ecc2aeeaa08a355d84d3ca9c3d2512399a194f29
Timeline
- nvd_ingest NVD