kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks.
[
{
"digest": {
"length": 398.0,
"function_hash": "326914359773850603727218387353975106796"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-0bec9a8b",
"signature_type": "Function",
"target": {
"function": "states_equal",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 585.0,
"function_hash": "207132037205159845546600269465900161234"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-32fd857c",
"signature_type": "Function",
"target": {
"function": "copy_verifier_state",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 4786.0,
"function_hash": "48320516282864774449412741221432115794"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-3e2effde",
"signature_type": "Function",
"target": {
"function": "adjust_ptr_min_max_vals",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 675.0,
"function_hash": "22783977611527452721980536284539711149"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-42958bd2",
"signature_type": "Function",
"target": {
"function": "push_stack",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 7103.0,
"function_hash": "150323760660487400918659421900339384955"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-7fdd4786",
"signature_type": "Function",
"target": {
"function": "do_check",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"107788994864617693643116693061103278818",
"106079743749843658021775344583427673639",
"320056761904361972254150238651215357173",
"185251871769341407918661518003882638808",
"281616918271498594775461730225318556537",
"119873869793026019372536885601341482092",
"186225144672612769480755754270965405891",
"25787974841327820412066241968807610616",
"330292516189863160654122324387809592175",
"243305606780518168405130618389823431951",
"259710687685064325266796827861102766985",
"5073486612961382460078789198789405385",
"220082853007074704731493766471270654569",
"60441847071174790201090129864348191714",
"185172262500521423252892484952555991658",
"7974767188581210091429568198955116853"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-a3e57871",
"signature_type": "Line",
"target": {
"file": "include/linux/bpf_verifier.h"
},
"signature_version": "v1"
},
{
"digest": {
"length": 5557.0,
"function_hash": "238227538297470067740665865299362246121"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-a6fa5c41",
"signature_type": "Function",
"target": {
"function": "fixup_bpf_calls",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2559.0,
"function_hash": "301707568031422756190382032380213335045"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-b5b99af9",
"signature_type": "Function",
"target": {
"function": "check_cond_jmp_op",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"233972072443480794669413701921747231123",
"210412820069574192567502928312410442308",
"153586803533435701155387123507508063456",
"172472896814887932147642298473406015781",
"210388012350243519061927010783788666104",
"93941573976886281001822976692280581709",
"161798387430693281109673893283559582623",
"292071806086889041743033529991411232428",
"95407147661306156765164622648193148363",
"91458703002078555569665583132857704328",
"56982378154407349886468818198958166616",
"124761676110909749141012982011443447411",
"71197851345749087879636811572101389340",
"62152912016735987520842711098881689640",
"24098686306953093500402656621660559655",
"277248056179856428323883280196159250863",
"42043573543902112902324416114194551565",
"175028192776914521355342385516753927099",
"17267565850789597100520824007761348139",
"334481237432396224568320706289715556744",
"30551162904059944522018493058304011040",
"37383073498024145242900673179419810154",
"47126033843358546450203082796503968490",
"337295974858193987875810377818283856662",
"128568435286444294847919577374895015729",
"179491001885278729852462731721214234854",
"17521781370613500689025784994915140149",
"266437121029169494543554584552284073065",
"256304688429828306114493548251460119971",
"264987866140641804145924617647579534899",
"190204303695318516779202191744371303346",
"48682839317715203045415110214740832823",
"234615906544745890803880612167113151495",
"108932752539789910245154293690930511839",
"9037582549771184385560564377018713062",
"28186688528659160243430203399394958178",
"245949317736060633266662368777338593080",
"39810691766798390733888432440189548798",
"51091596540513940106443464448241888869",
"264091811196358443535915692384818742388",
"287163264390290752825654852600304968421",
"231285215998516245580484558391774793239",
"205477771792063964587565536001733577867",
"10539704184795120264365648241249310763",
"177246050552663199463381310417738756536",
"221512589023063790881416899638109698899",
"250210401306231593065711664481591068975",
"99985389255534418773987930999517141597",
"44485585305464604756131009392587745822",
"155673186534514980530292449546216434837",
"202178381897683235380151513486067266273"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-da2fd1d7",
"signature_type": "Line",
"target": {
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-7308.json"
[
{
"digest": {
"length": 4627.0,
"function_hash": "167723346777557006598267779798185125544"
},
"source": "https://github.com/torvalds/linux/commit/d3bd7413e0ca40b60cf60d4003246d067cafdeda",
"deprecated": false,
"id": "CVE-2019-7308-1c95b25d",
"signature_type": "Function",
"target": {
"function": "adjust_scalar_min_max_vals",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 398.0,
"function_hash": "326914359773850603727218387353975106796"
},
"source": "https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-50627255",
"signature_type": "Function",
"target": {
"function": "states_equal",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"107788994864617693643116693061103278818",
"106079743749843658021775344583427673639",
"320056761904361972254150238651215357173",
"185251871769341407918661518003882638808",
"281616918271498594775461730225318556537",
"119873869793026019372536885601341482092",
"186225144672612769480755754270965405891",
"25787974841327820412066241968807610616",
"330292516189863160654122324387809592175",
"243305606780518168405130618389823431951",
"259710687685064325266796827861102766985",
"5073486612961382460078789198789405385",
"220082853007074704731493766471270654569",
"60441847071174790201090129864348191714",
"185172262500521423252892484952555991658",
"7974767188581210091429568198955116853"
]
},
"source": "https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-5c264d21",
"signature_type": "Line",
"target": {
"file": "include/linux/bpf_verifier.h"
},
"signature_version": "v1"
},
{
"digest": {
"length": 675.0,
"function_hash": "22783977611527452721980536284539711149"
},
"source": "https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-7e53c00d",
"signature_type": "Function",
"target": {
"function": "push_stack",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 585.0,
"function_hash": "207132037205159845546600269465900161234"
},
"source": "https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-83f6eb5c",
"signature_type": "Function",
"target": {
"function": "copy_verifier_state",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 7103.0,
"function_hash": "150323760660487400918659421900339384955"
},
"source": "https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-9d8c3d66",
"signature_type": "Function",
"target": {
"function": "do_check",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"241303986820239068410613443696237349734",
"30074412778266491004465781573429090898",
"202666486935702327703733695467908503678",
"93110428356306378872926188385881671857",
"268749663893557658735232969105125290851",
"157939508106527318409942591343368875857",
"195546631343095476580419844253325299514",
"200158370798649777997014512199158859950",
"269802692898368486122297534955587215596",
"128676478366634542316565746137188567971",
"96863880894955747406993311961143116688",
"138190035494557935594915829779364314815",
"307581971852586362949562012419242584368",
"150385874362183761174165634597419296920",
"202990760217463265495149075850426803157",
"29064022634790523060885129962428879325",
"216704007464532641449029626503066470764",
"21845700819522399155021565026369528473",
"165990392710131297235945911384295003900",
"316930356467656797281787885059677002585",
"69933766410075455321307708383123635488",
"77088147292905274005606580484536856591",
"26258796152638644286165678289676872820",
"151999909571577086743707910890474525092",
"164271865598619155809474670990232427692",
"328382560069415689828458300261541753135",
"288769957937041703811627747871761232646",
"81403638957991244090725073827227059530"
]
},
"source": "https://github.com/torvalds/linux/commit/d3bd7413e0ca40b60cf60d4003246d067cafdeda",
"deprecated": false,
"id": "CVE-2019-7308-c45d052a",
"signature_type": "Line",
"target": {
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 890.0,
"function_hash": "235577001037928414247832215136251778917"
},
"source": "https://github.com/torvalds/linux/commit/d3bd7413e0ca40b60cf60d4003246d067cafdeda",
"deprecated": false,
"id": "CVE-2019-7308-c60b018b",
"signature_type": "Function",
"target": {
"function": "sanitize_ptr_alu",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2559.0,
"function_hash": "301707568031422756190382032380213335045"
},
"source": "https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-d8186b1e",
"signature_type": "Function",
"target": {
"function": "check_cond_jmp_op",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 5557.0,
"function_hash": "238227538297470067740665865299362246121"
},
"source": "https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-efc88d52",
"signature_type": "Function",
"target": {
"function": "fixup_bpf_calls",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"233972072443480794669413701921747231123",
"210412820069574192567502928312410442308",
"153586803533435701155387123507508063456",
"172472896814887932147642298473406015781",
"210388012350243519061927010783788666104",
"93941573976886281001822976692280581709",
"161798387430693281109673893283559582623",
"292071806086889041743033529991411232428",
"95407147661306156765164622648193148363",
"91458703002078555569665583132857704328",
"56982378154407349886468818198958166616",
"124761676110909749141012982011443447411",
"71197851345749087879636811572101389340",
"62152912016735987520842711098881689640",
"24098686306953093500402656621660559655",
"277248056179856428323883280196159250863",
"42043573543902112902324416114194551565",
"175028192776914521355342385516753927099",
"17267565850789597100520824007761348139",
"334481237432396224568320706289715556744",
"30551162904059944522018493058304011040",
"37383073498024145242900673179419810154",
"47126033843358546450203082796503968490",
"337295974858193987875810377818283856662",
"128568435286444294847919577374895015729",
"179491001885278729852462731721214234854",
"17521781370613500689025784994915140149",
"266437121029169494543554584552284073065",
"256304688429828306114493548251460119971",
"264987866140641804145924617647579534899",
"190204303695318516779202191744371303346",
"48682839317715203045415110214740832823",
"234615906544745890803880612167113151495",
"108932752539789910245154293690930511839",
"9037582549771184385560564377018713062",
"28186688528659160243430203399394958178",
"245949317736060633266662368777338593080",
"39810691766798390733888432440189548798",
"51091596540513940106443464448241888869",
"264091811196358443535915692384818742388",
"287163264390290752825654852600304968421",
"231285215998516245580484558391774793239",
"205477771792063964587565536001733577867",
"10539704184795120264365648241249310763",
"177246050552663199463381310417738756536",
"221512589023063790881416899638109698899",
"250210401306231593065711664481591068975",
"99985389255534418773987930999517141597",
"44485585305464604756131009392587745822",
"155673186534514980530292449546216434837",
"202178381897683235380151513486067266273"
]
},
"source": "https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-f8cc1946",
"signature_type": "Line",
"target": {
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 4786.0,
"function_hash": "48320516282864774449412741221432115794"
},
"source": "https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38",
"deprecated": false,
"id": "CVE-2019-7308-fbca9339",
"signature_type": "Function",
"target": {
"function": "adjust_ptr_min_max_vals",
"file": "kernel/bpf/verifier.c"
},
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-7308.json"