7.8

CVE-2026-89906

LoongArch: BPF: Refactor jump offset calculation in tail call

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: BPF: Refactor jump offset calculation in tail call

The old macro-based jmp_offset calculation derives the jump distance
from a stale prior-pass code stride, which can lead to wrong branch
offsets and soft lockups under extra JIT passes.

Fix this by calculating the offset directly on the absolute target:
"ctx->offset[insn + 1] - ctx->idx".

To avoid a false 16-bit range check abort during size estimation, add
a "ctx->image == NULL" guard to inject a safe dummy offset.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3
Version < 882b8912b7e92341fdb115ba0e2e5142a28684ff
Status affected
Version cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3
Version < 96f44d493c280ea161569c43d7ed0f3b0815803a
Status affected
Version cd39d9e6b7e4c58fa77783e7aedf7ada51d02ea3
Version < 37d545d12f21c4d50612ecaebd7ae1e5bf91b2d8
Status affected
Version 1a782fa32e644aa9fbae6c8488f3e61221ac96e1
Status affected
Version 17c010fe45def335fe03a0718935416b04c7f349
Status affected
Version f83d469e16bb1f75991ca67c56786fb2aaa42bea
Status affected
Version f2b5e50cc04d7a049b385bc1c93b9cbf5f10c94f
Status affected
Version 9262e3e04621558e875eb5afb5e726b648cd5949
Status affected
Version 6.1.149
Version < 6.2
Status affected
Version 6.6.103
Version < 6.7
Status affected
Version 6.12.43
Version < 6.13
Status affected
Version 6.15.11
Version < 6.16
Status affected
Version 6.16.2
Version < 6.17
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.17
Status affected
Version 0
Version < 6.17
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.058
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/882b8912b7e92341fdb115ba0e2e5142a28684ff
https://git.kernel.org/stable/c/96f44d493c280ea161569c43d7ed0f3b0815803a
https://git.kernel.org/stable/c/37d545d12f21c4d50612ecaebd7ae1e5bf91b2d8