Riskcovery

CVE-2024-35903

x86/bpf: Fix IP after emitting call depth accounting

State
Published
Severity
5.5 Medium
Published
May 19, 2024
Updated
May 11, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/bpf: Fix IP after emitting call depth accounting

Adjust the IP passed to `emit_patch` so it calculates the correct offset for the CALL instruction if `x86_call_depth_emit_accounting` emits code. Otherwise we will skip some instructions and most likely crash.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b2e9dfe54be4d023124d588d6f03d16a9c0d2507 to before 3f9d57c771656bfd651e22edcfdb5f60e62542d4Affected
  • b2e9dfe54be4d023124d588d6f03d16a9c0d2507 to before 81166178cf0a0062a22b1b3b5368183d39577028Affected
  • b2e9dfe54be4d023124d588d6f03d16a9c0d2507 to before 9d98aa088386aee3db1b7b60b800c0fde0654a4aAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.26 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.