CVE-2024-43843: riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
In the Linux kernel, the following vulnerability has been resolved:
riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
We get the size of the trampoline image during the dry run phase and allocate memory based on that size. The allocated image will then be populated with instructions during the real patch phase. But after commit 26ef208c209a ("bpf: Use archbpftrampolinesize"), the im argument is inconsistent in the dry run and real patch phase. This may cause emitimm in RV64 to generate a different number of instructions when generating the 'im' address, potentially causing out-of-bounds issues. Let's emit the maximum number of instructions for the "im" address during dry run to fix this problem.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43843?
CVE-2024-43843 has been categorized as a high-severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-43843?
To fix CVE-2024-43843, update to a patched version of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
What types of systems are affected by CVE-2024-43843?
CVE-2024-43843 affects systems running the Linux kernel versions between 6.8 and 6.10.3.
What impact does CVE-2024-43843 have on systems?
CVE-2024-43843 can lead to out-of-bounds issues when preparing trampoline images, potentially resulting in crashes or code execution.
Is CVE-2024-43843 being actively exploited?
There is currently no public information indicating that CVE-2024-43843 is being actively exploited in the wild.