Security tracker / CVE-2023-52452

CVE-2023-52452

bpf: Fix accesses to uninit stack slots

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced with 01f810ace9ed3 ("bpf: Allow variable-offset
 carnil> stack access") in 5.12-rc1 (and backported to 5.10.33)

Bugs

Status

Branch	Status
upstream	released (6.8-rc1) [6b4a64bafd107e521c01eec3453ce94a3fb38529]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.6-upstream-stable	released (6.6.14) [0954982db8283016bf38e9db2da5adf47a102e19]
6.1-upstream-stable	needed
5.10-upstream-stable	needed
4.19-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.6.15-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	needed
4.19-buster-security	N/A "Vulnerable code not present"