CVE-2023-52462

bpf: fix check for attempt to corrupt spilled pointer

published February 23, 2024

CVSS
—
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix check for attempt to corrupt spilled pointer

When register is spilled onto a stack as a 1/2/4-byte register, we set

slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it,

depending on actual spill size). So to check if some stack slot has

spilled register we need to consult slot_type[7], not slot_type[0].

To avoid the need to remember and double-check this in the future, just

use is_spilled_reg() helper.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Published
2024-02-23T14:46Z
EPSS history
Timeline
  • 23 FEB 14:46Z
    bpf: fix check for attempt to corrupt spilled pointer
    cvelistv5