CVE-2025-38591
bpf: Reject narrower access to pointer ctx fields
References
Notes
carnil> Introduced in f96da09473b52 ("bpf: simplify narrower ctx access")
carnil> 0df1a55afa832 ("bpf: Warn on internal verifier errors"). Vulnerable versions:
carnil> 4.13.
Bugs
Status
| Branch |
Status |
| upstream |
released (6.17-rc1) [e09299225d5ba3916c91ef70565f7d2187e4cca0]
|
| 6.18-upstream-stable |
N/A "Fixed before branching point"
|
| 6.17-upstream-stable |
N/A "Fixed before branching point"
|
| 6.16-upstream-stable |
released (6.16.1) [202900ceeef67458c964c2af6e1427c8e533ea7c]
|
| 6.15-upstream-stable |
needed
|
| 6.12-upstream-stable |
needed
|
| 6.6-upstream-stable |
needed
|
| 6.1-upstream-stable |
needed
|
| 5.10-upstream-stable |
needed
|
| sid |
released (6.16.3-1)
|
| 6.12-trixie-security |
needed
|
| 6.1-bookworm-security |
needed
|
| 5.10-bullseye-security |
needed
|