CVE-2024-43838

MEDIUM

Linux Kernel 6.9.8-6.10 - Integer Overflow in BPF Jump Offset Adjustment

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the insn->imm field for all overflow check, which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case, not the general jump instruction case. Fix it by using insn->off for overflow check in the general case.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/345652866a8869825a2a582ee5a28d75141f184a

Patch

https://git.kernel.org/stable/c/4a04b4f0de59dd5c621e78f15803ee0b0544eeb8

Scores

CVSS v3 5.5

EPSS 0.0018

EPSS Percentile 7.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-190

Status published

Products (9)

Linux/Linux < 6.10

Linux/Linux 5337ac4c9b807bc46baa0713121a0afa8beacd70 - 345652866a8869825a2a582ee5a28d75141f184a

Linux/Linux 5337ac4c9b807bc46baa0713121a0afa8beacd70 - 4a04b4f0de59dd5c621e78f15803ee0b0544eeb8

Linux/Linux 6.10

Linux/Linux 6.10.3 - 6.10.*

Linux/Linux 6.11

Linux/Linux 6.9.8 - 6.10

Linux/Linux e47a1a791d32bd6c8f71d23c84294f2c053553a1

linux/linux_kernel 6.9.8 - 6.10

Published Aug 17, 2024

Tracked Since Feb 18, 2026