CVE-2025-37893

MEDIUM EPSS 12.0%
Published Apr 18, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Apr 18, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix off-by-one error in build_prologue() Vincent reported that running BPF progs with tailcalls on LoongArch causes kernel hard lockup. Debugging the issues shows that the JITed image missing a jirl instruction at the end of the epilogue. There are two passes in JIT compiling, the first pass set the flags and the second pass generates JIT code based on those flags. With BPF progs mixing bpf2bpf and tailcalls, build_prologue() generates N insns in the first pass and then generates N+1 insns in the second pass. This makes epilogue_offset off by one and we will jump to some unexpected insn and cause lockup. Fix this by inserting a nop insn.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
12.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-193

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥6.1  –  <6.1.134
linuxlinux_kernel*≥6.2  –  <6.6.87
linuxlinux_kernel*≥6.7  –  <6.12.23
linuxlinux_kernel*≥6.13  –  <6.13.11
linuxlinux_kernel*≥6.14  –  <6.14.2

References 5

  • git.kernel.org https://git.kernel.org/stable/c/205a2182c51ffebaef54d643e3745e720cded08b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/48b904de2408af5f936f0e03f48dfcddeab58aa0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7e2586991e36663c9bc48c828b83eab180ad30a9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b3ffad2f02db4aace6799fe0049508b8925eae45
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c74d95a5679741ef428974ab788f5b0758dc78ae
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/205a2182c51ffebaef54d643e3745e720cded08b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/48b904de2408af5f936f0e03f48dfcddeab58aa0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7e2586991e36663c9bc48c828b83eab180ad30a9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b3ffad2f02db4aace6799fe0049508b8925eae45
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c74d95a5679741ef428974ab788f5b0758dc78ae
    Patch