CVSS 5.5 · Medium EPSS 0,23%
Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slot_type[7], not slot_type[0]. To avoid the need to remember and double-check this in the future, just use is_spilled_reg() helper.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Semua versi sebelum 5.10.209 |
| linux | linux kernel | Versi 5.11.0 hingga sebelum 5.15.148 |
| linux | linux kernel | Versi 5.16.0 hingga sebelum 6.1.75 |
| linux | linux kernel | Versi 6.2.0 hingga sebelum 6.6.14 |
| linux | linux kernel | Versi 6.7.0 hingga sebelum 6.7.2 |