CVE-2025-71270
LoongArch: Enable exception fixup for specific ADE subcode
Published 7 mo ago · modified 4 mo ago · JSON
Summary
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Enable exception fixup for specific ADE subcode
This patch allows the LoongArch BPF JIT to handle recoverable memory access errors generated by BPF_PROBE_MEM* instructions.
When a BPF program performs memory access operations, the instructions it executes may trigger ADEM exceptions. The kernel’s built-in BPF exception table mechanism (EX_TYPE_BPF) will generate corresponding exception fixup entries in the JIT compilation phase; however, the architecture-specific trap handling function needs to proactively call the common fixup routine to achieve exception recovery.
do_ade(): fix EX_TYPE_BPF memory access exceptions for BPF programs, ensure safe execution.
Relevant test cases: illegal address access tests in module_attach and subprogs_extable of selftests/bpf.
Exploit prediction (EPSS)
0.13% probability of exploitation in the next 30 days, higher than 2% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected products
- Linux Linux
Classification
- Technology feeds
- Linux kernel (RSS, critical only)
References
- git.kernel.org /stable/c/73ede654d9daa2ee41bdd17bc62946fc5a0258cb
- git.kernel.org /stable/c/c49a28068363f3dca439aa5fe4d3b1f8159809fe
- git.kernel.org /stable/c/c2ed4f71e9288f21d5c53ff790270758e60fa5f9
- git.kernel.org /stable/c/9bdc1ab5e4ce6f066119018d8f69631a46f9c5a0
Sources
- CVE List: CVE-2025-71270
- NVD: CVE-2025-71270
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.