5.5med

CVE-2025-71270

LoongArch: Enable exception fixup for specific ADE subcode

Published 7 mo ago · modified 4 mo ago · JSON

CVSS
5.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.1%
percentile 2%
Public exploits
0
none known

Summary

In the Linux kernel, the following vulnerability has been resolved:

LoongArch: Enable exception fixup for specific ADE subcode

This patch allows the LoongArch BPF JIT to handle recoverable memory access errors generated by BPF_PROBE_MEM* instructions.

When a BPF program performs memory access operations, the instructions it executes may trigger ADEM exceptions. The kernel’s built-in BPF exception table mechanism (EX_TYPE_BPF) will generate corresponding exception fixup entries in the JIT compilation phase; however, the architecture-specific trap handling function needs to proactively call the common fixup routine to achieve exception recovery.

do_ade(): fix EX_TYPE_BPF memory access exceptions for BPF programs, ensure safe execution.

Relevant test cases: illegal address access tests in module_attach and subprogs_extable of selftests/bpf.

Exploit prediction (EPSS)

0.13% probability of exploitation in the next 30 days, higher than 2% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.15.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Linux Linux

Classification

Technology feeds
Linux kernel (RSS, critical only)

References

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.