2 matches found
kernel: bpf: fix check for attempt to corrupt spilled pointer
A flaw was found in the Linux kernel. When the register is spilled onto a stack as a 1/2/4-byte register, the slottypeBPFREGSIZE - 1 is set, possibly including a few more below it, depending on the actual spill size. To confirm if some stack slots have a spilled register, consult slottype7, not...
UBUNTU-CVE-2023-52462
In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a 1/2/4-byte register, we set slottypeBPFREGSIZE - 1 plus potentially few more below it, depending on actual spill size. So to check i...