In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
fprobe: Terminate the fgraph_data list when the reservation is not filled<\/p>\n
fprobe_fgraph_entry() reserves shadow stack space for every fprobe with
\nan exit handler, but only fills it for those whose entry handler returns
\n0. fgraph_reserve_data() does not clear the area, so fprobe_return()
\nparses the unused tail as headers left over from an earlier call, and an
\nexit handler can run twice or despite its entry handler asking to skip
\nit.<\/p>\n
Write a zero word after the last entry to terminate the walk. A zeroed
\nslot does not decode to a NULL fprobe on the arches that encode the
\nheader into one unsigned long, since arch_decode_fprobe_header_fp() ORs
\nin FPROBE_HEADER_MSB_PATTERN, so make read_fprobe_header() return NULL
\nfor a zeroed slot.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
fprobe: Terminate the fgraph_data list when the reservation is not filled<\/p>\n
fprobe_fgraph_entry() reserves shadow stack space for ev<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-41012","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/41012","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=41012"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=41012"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=41012"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}