In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args<\/p>\n
On RV64, the ABI requires sign-extension for signed 1-byte and 2-byte kfunc
\nargs. However, the RV64 JIT currently does not perform sign-extension for
\nsuch kfunc args.<\/p>\n
Before commit 7ce090afbf72 (“bpf: Infer zext_dst based on static register
\nliveness analysis”), state pruning could potentially omit zero-extension
\nof 32-bit subregisters, which inadvertently masked the above issue by making
\nthe args appear as if they had been properly sign-extended. After that
\ncommit, the problem is exposed, causing the kfunc_call\/kfunc_call_test4
\nselftest to fail.<\/p>\n
Fix this by extending the existing sign-extension logic to handle signed
\n1-byte and 2-byte kfunc args as well.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args<\/p>\n
On RV64, the ABI requires sign-extension for signed 1-byt<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25604","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25604","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25604"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25604"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25604"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}