CVE-2025-71129: LoongArch: BPF: Sign extend kfunc call arguments
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: BPF: Sign extend kfunc call arguments
The kfunc calls are native calls so they should follow LoongArch calling conventions. Sign extend its arguments properly to avoid kernel panic. This is done by adding a new emitabiext() helper. The emitabiext() helper performs extension in place meaning a value already store in the target register (Note: this is different from the existing signextend() helper and thus we can't reuse it).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71129?
CVE-2025-71129 has a medium severity level due to potential impact on the stability and security of the Linux kernel.
How do I fix CVE-2025-71129?
To fix CVE-2025-71129, apply the appropriate patches or updates provided by the Linux kernel maintainers.
What systems are affected by CVE-2025-71129?
CVE-2025-71129 affects Linux kernel versions utilized on LoongArch architecture.
What is the impact of CVE-2025-71129?
The impact of CVE-2025-71129 could result in improper handling of kfunc call arguments, potentially leading to data corruption or system crashes.
How can I determine if my Linux system is vulnerable to CVE-2025-71129?
You can determine if your Linux system is vulnerable to CVE-2025-71129 by checking the kernel version against the versions that include the patches for this vulnerability.