cveboard RSS feed

CVE-2024-43843

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

riscv, bpf: Fix out-of-bounds issue when preparing trampoline image

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix out-of-bounds issue when preparing trampoline image We get the size of the trampoline image during the dry run phase and allocate memory based on that size. The allocated image will then be populated with instructions during the real patch phase. But after commit 26ef208c209a ("bpf: Use arch_bpf_trampoline_size"), the `im` argument is inconsistent in the dry run and real patch phase. This may cause emit_imm in RV64 to generate a different number of instructions when generating the 'im' address, potentially causing out-of-bounds issues. Let's emit the maximum number of instructions for the "im" address during dry run to fix this problem.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
26ef208c209a0e6eed8942a5d191b39dccfa6e38affectedgit3e6a1b1b179abb643ec3560c02bc3082bc92285fUnavailableNone listed
26ef208c209a0e6eed8942a5d191b39dccfa6e38affectedgit9f1e16fb1fc9826001c69e0551d51fbbcd2d74e9UnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
6.8affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver6.8UnavailableNone listed
6.10.3unaffectedsemverUnavailable6.10.*None listed
6.11unaffectedoriginal_commit_for_fixUnavailable*None listed