In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix potential NULL dereference The bpf_jit_binary_free() function requires a non-NULL argument. When the RISC-V BPF JIT fails to converge in NR_JIT_ITERATIONS steps, jit_data->header will be NULL, which triggers a NULL dereference. Avoid this by checking the argument, prior calling the function.
Version | Score | Severity | Vector String |
---|---|---|---|
3.1 | 7.5 | High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Product | Vendor | Version |
---|---|---|
Linux | Linux | 7cd46930b8bf37b84777410ac21bfdf1179021d5 |
Linux | Linux | < 0.1.15 |