Security tracker / CVE-2025-37893

CVE-2025-37893

LoongArch: BPF: Fix off-by-one error in build_prologue()

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 5dc615520c4d ("LoongArch: Add BPF JIT support")
 carnil> bb035ef0cc91 ("LoongArch: BPF: Support mixing bpf2bpf and tailcalls").
 carnil> Vulnerable versions: 6.1.

Bugs

Status

Branch	Status
upstream	released (6.15-rc1) [7e2586991e36663c9bc48c828b83eab180ad30a9]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.14-upstream-stable	released (6.14.2) [48b904de2408af5f936f0e03f48dfcddeab58aa0]
6.13-upstream-stable	released (6.13.11) [c74d95a5679741ef428974ab788f5b0758dc78ae]
6.12-upstream-stable	released (6.12.23) [205a2182c51ffebaef54d643e3745e720cded08b]
6.6-upstream-stable	released (6.6.87) [b3ffad2f02db4aace6799fe0049508b8925eae45]
6.1-upstream-stable	needed
5.10-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.12.25-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	N/A "Vulnerable code not present"