CVE-2024-53125
CVE-2024-53125
Mié, 04/12/2024 – 14:15
CVE-2024-53125
bpf: sync_linked_regs() must preserve subreg_def
Range propagation must not affect subreg_def marks, otherwise the
following example is rewritten by verifier incorrectly when
BPF_F_TEST_RND_HI32 flag is set:
0: call bpf_ktime_get_ns call bpf_ktime_get_ns
1: r0 &= 0x7fffffff after verifier r0 &= 0x7fffffff
2: w1 = w0 rewrites w1 = w0
3: if w0 r11 = 0x2f5674a6 (r)
4: r1 >>= 32 r11
