Riskcovery

CVE-2024-43838

bpf: fix overflow check in adjust_jmp_off()

State
Published
Severity
Not scored
Published
Aug 17, 2024
Updated
May 23, 2026
Reserved
Aug 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix overflow check in adjust_jmp_off()

adjust_jmp_off() incorrectly used the insn->imm field for all overflow check, which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case, not the general jump instruction case. Fix it by using insn->off for overflow check in the general case.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5337ac4c9b807bc46baa0713121a0afa8beacd70 to before 345652866a8869825a2a582ee5a28d75141f184aAffected
  • 5337ac4c9b807bc46baa0713121a0afa8beacd70 to before 4a04b4f0de59dd5c621e78f15803ee0b0544eeb8Affected
  • e47a1a791d32bd6c8f71d23c84294f2c053553a1Affected
  • 6.9.8 to before 6.10Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.