CVE-2024-43838

Source
https://cve.org/CVERecord?id=CVE-2024-43838
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43838.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-43838
Downstream
Published
2024-08-17T09:21:54Z
Modified
2026-10-20T10:30:21Z
Summary
bpf: fix overflow check in adjust_jmp_off()
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix overflow check in adjust_jmp_off()

adjust_jmp_off() incorrectly used the insn->imm field for all overflow check, which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case, not the general jump instruction case. Fix it by using insn->off for overflow check in the general case.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43838.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5337ac4c9b807bc46baa0713121a0afa8beacd70
Fixed
345652866a8869825a2a582ee5a28d75141f184a
Fixed
4a04b4f0de59dd5c621e78f15803ee0b0544eeb8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.9.8
Fixed
6.10
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e47a1a791d32bd6c8f71d23c84294f2c053553a1

Affected versions

v6.*
v6.9.10
v6.9.11
v6.9.12
v6.9.8
v6.9.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43838.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.10.0
Fixed
6.10.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43838.json"