2024-05-26 02:03:22 +00:00

32 lines
1.6 KiB
JSON

{
"id": "CVE-2024-35903",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-19T09:15:11.117",
"lastModified": "2024-05-20T13:00:04.957",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/bpf: Fix IP after emitting call depth accounting\n\nAdjust the IP passed to `emit_patch` so it calculates the correct offset\nfor the CALL instruction if `x86_call_depth_emit_accounting` emits code.\nOtherwise we will skip some instructions and most likely crash."
},
{
"lang": "es",
"value": " En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: x86/bpf: corrige la IP despu\u00e9s de emitir la contabilidad de profundidad de llamadas. Ajuste la IP pasada a `emit_patch` para que calcule el desplazamiento correcto para la instrucci\u00f3n CALL si `x86_call_ Depth_emit_accounting` emite c\u00f3digo. De lo contrario, nos saltaremos algunas instrucciones y lo m\u00e1s probable es que fallemos."
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/3f9d57c771656bfd651e22edcfdb5f60e62542d4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/81166178cf0a0062a22b1b3b5368183d39577028",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/9d98aa088386aee3db1b7b60b800c0fde0654a4a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}