medium5.5
CVE-2024-35903
In the Linux kernel, the following vulnerability has been resolved: x86/bpf: Fix IP after emitting call depth accounting Adjust the IP passed to `emit_patch` s…
Impact
In the Linux kernel, the following vulnerability has been resolved: x86/bpf: Fix IP after emitting call depth accounting Adjust the IP passed to `emit_patch` so it calculates the correct offset for the CALL instruction if `x86_call_depth_emit_accounting` emits code. Otherwise we will skip some instructions and most likely crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 6.2 before 6.6.26 from 6.7 before 6.8.5 Version 6.9 |
References
- NVD record
- CVE.org record
- https://git.kernel.org/stable/c/3f9d57c771656bfd651e22edcfdb5f60e62542d4
- https://git.kernel.org/stable/c/81166178cf0a0062a22b1b3b5368183d39577028
- https://git.kernel.org/stable/c/9d98aa088386aee3db1b7b60b800c0fde0654a4a
- https://git.kernel.org/stable/c/3f9d57c771656bfd651e22edcfdb5f60e62542d4
- https://git.kernel.org/stable/c/81166178cf0a0062a22b1b3b5368183d39577028
- https://git.kernel.org/stable/c/9d98aa088386aee3db1b7b60b800c0fde0654a4a