CVE-2024-35905: bpf: Protect against int overflow for stack access size
In the Linux kernel, the following vulnerability has been resolved:
bpf: Protect against int overflow for stack access size
The Linux kernel CVE team has assigned CVE-2024-35905 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051954-CVE-2024-35905-d079@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
bpf: Protect against int overflow for stack access size
This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in checkstackrangeinitialized(). This patch causes the verification of a program with such a non-sensical access size to fail.
This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.10.215 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.154 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.85 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.26 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8.5 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35905?
CVE-2024-35905 has been classified with a high severity due to the potential for integer overflow leading to stack corruption.
How do I fix CVE-2024-35905?
To fix CVE-2024-35905, you need to upgrade the kernel to version 5.10.215, 5.15.154, 6.1.85, 6.6.26, 6.8.5, or 6.9.
Which systems are affected by CVE-2024-35905?
CVE-2024-35905 affects multiple versions of the Linux kernel, specifically those below the indicated patched versions.
What vulnerabilities does CVE-2024-35905 address?
CVE-2024-35905 addresses an integer overflow vulnerability that can occur during stack access size operations in the Linux kernel.
Is there a workaround for CVE-2024-35905?
There is no official workaround for CVE-2024-35905; patching is strongly recommended to mitigate any security risks.