CVE-2025-40079

CVE-2025-40079 (Linux kernel) fixes a sign-extension bug in BPF for struct ops return values on RISCV. The issue caused a kernel panic in the ns_bpf_qdisc selftest when a skb pointer is sign-extended from 32 to 64 bits, which is incorrect for struct ops per the RISCV ABI. The description notes si...

CVE-2025-40079 riscv, bpf: Sign extend struct ops return values properly

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Sign extend struct ops return values properly The nsbpfqdisc selftest triggers a kernel panic: Unable to handle kernel paging request at virtual address ffffffffa38dbf58 Current testprogs pgtable: 4K pagesize, 57-bit...