CVE-2025-38586
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38586
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38586.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38586
- Downstream
- Published
- 2025-08-19T17:03:08.012Z
- Modified
- 2025-12-02T17:08:11.532380Z
- Summary
- bpf, arm64: Fix fp initialization for exception boundary
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
bpf, arm64: Fix fp initialization for exception boundary
In the ARM64 BPF JIT when prog->aux->exceptionboundary is set for a BPF program, findusedcalleeregs() is not called because for a program acting as exception boundary, all callee saved registers are saved. findusedcallee_regs() sets
ctx->fp_used = true;when it sees FP being used in any of the instructions.For programs acting as exception boundary, ctx->fp_used remains false even if frame pointer is used by the program and therefore, FP is not set-up for such programs in the prologue. This can cause the kernel to crash due to a pagefault.
Fix it by setting ctx->fp_used = true for exception boundary programs as fp is always saved in such programs.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38586.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/0dbef493cae7d451f740558665893c000adb2321
- https://git.kernel.org/stable/c/1ce30231e0a2c8c361ee5f8f7f265fc17130adce
- https://git.kernel.org/stable/c/b114fcee766d5101eada1aca7bb5fd0a86c89b35
- https://git.kernel.org/stable/c/e23184725dbb72d5d02940222eee36dbba2aa422
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38586.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-38586
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5d4fa9ec5643a5c75d3c1e6abf50fb9284caf1ffFixed0dbef493cae7d451f740558665893c000adb2321Fixede23184725dbb72d5d02940222eee36dbba2aa422Fixed1ce30231e0a2c8c361ee5f8f7f265fc17130adceFixedb114fcee766d5101eada1aca7bb5fd0a86c89b35