CVE-2024-43838
published 2024-08-17CVE-2024-43838: In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the insn->imm…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.18%
7.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
bpf: fix overflow check in adjust_jmp_off()
adjust_jmp_off() incorrectly used the insn->imm field for all overflow check,
which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case,
not the general jump instruction case. Fix it by using insn->off for overflow
check in the general case.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.10.3-1 (forky) | linux 6.10.3-1 (forky) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 5337ac4c9b807bc46baa0713121a0afa8beacd70 < 345652866a8869825a2a582ee5a28d75141f184a | 345652866a8869825a2a582ee5a28d75141f184a |
| linux | linux | >= 5337ac4c9b807bc46baa0713121a0afa8beacd70 < 4a04b4f0de59dd5c621e78f15803ee0b0544eeb8 | 4a04b4f0de59dd5c621e78f15803ee0b0544eeb8 |
| linux | linux | >= 6.9.8 < 6.10 | 6.10 |
| linux | linux_kernel | >= 0 < 6.10.3-1 | 6.10.3-1 |
| linux | linux_kernel | >= 0 < 6.10.3-1 | 6.10.3-1 |
| linux | linux_kernel | >= 6.10 < 6.10.3 | 6.10.3 |
| linux | linux_kernel | >= 6.9.8 < 6.10 | 6.10 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: bpf: fix overflow check in adjust_jmp_off()
vendor_redhat·2024-08-17·CVSS 5.5
CVE-2024-43838 [MEDIUM] CWE-682 kernel: bpf: fix overflow check in adjust_jmp_off()
kernel: bpf: fix overflow check in adjust_jmp_off()
In the Linux kernel, the following vulnerability has been resolved:
bpf: fix overflow check in adjust_jmp_off()
adjust_jmp_off() incorrectly used the insn->imm field for all overflow check,
which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case,
not the general jump instruction case. Fix it by using insn->off for overflow
check in the general case.
The Linux kernel vulnerability in the BPF subsystem was resolved by fixing the `adjust_jmp_off()` function. Previously, overflow checks used `insn->imm` for all jump instructions, which was incorrect.
Statement: Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.
Mi
Debian
CVE-2024-43838: linux - In the Linux kernel, the following vulnerability has been resolved: bpf: fix ov...
vendor_debian·2024·CVSS 5.5
CVE-2024-43838 [MEDIUM] CVE-2024-43838: linux - In the Linux kernel, the following vulnerability has been resolved: bpf: fix ov...
In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the insn->imm field for all overflow check, which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case, not the general jump instruction case. Fix it by using insn->off for overflow check in the general case.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.10.3-1)
sid: resolved (fixed in 6.10.3-1)
trixie: resolved (fixed in 6.10.3-1)
GHSA
GHSA-hrq9-fvj6-g7g7: In the Linux kernel, the following vulnerability has been resolved:
bpf: fix overflow check in adjust_jmp_off()
adjust_jmp_off() incorrectly used th
ghsa_unreviewed·2024-08-17
CVE-2024-43838 [MEDIUM] CWE-190 GHSA-hrq9-fvj6-g7g7: In the Linux kernel, the following vulnerability has been resolved:
bpf: fix overflow check in adjust_jmp_off()
adjust_jmp_off() incorrectly used th
In the Linux kernel, the following vulnerability has been resolved:
bpf: fix overflow check in adjust_jmp_off()
adjust_jmp_off() incorrectly used the insn->imm field for all overflow check,
which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case,
not the general jump instruction case. Fix it by using insn->off for overflow
check in the general case.
OSV
CVE-2024-43838: In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the
osv·2024-08-17·CVSS 5.5
CVE-2024-43838 [MEDIUM] CVE-2024-43838: In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the
In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the insn->imm field for all overflow check, which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case, not the general jump instruction case. Fix it by using insn->off for overflow check in the general case.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-17
Published