CVE-2024-35903: x86/bpf: Fix IP after emitting call depth accounting
In the Linux kernel, the following vulnerability has been resolved:
x86/bpf: Fix IP after emitting call depth accounting
Adjust the IP passed to emitpatch so it calculates the correct offset for the CALL instruction if x86calldepthemitaccounting emits code. Otherwise we will skip some instructions and most likely crash.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35903?
CVE-2024-35903 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-35903?
To fix CVE-2024-35903, update to the patched versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.9-1, or 6.12.10-1.
What systems are affected by CVE-2024-35903?
CVE-2024-35903 affects specific versions of the Linux kernel on Debian-based systems.
What impact does CVE-2024-35903 have?
CVE-2024-35903 can lead to incorrect instruction pointer calculations, potentially affecting application behavior.
When was CVE-2024-35903 reported?
CVE-2024-35903 was reported and resolved in the recent updates to the Linux kernel.