CVE-2026-68285: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix memory leak in bpf_jit_free() When bpf_int_jit_compile() is called for subprograms, it returns early during the first pass (!prog->is_func || extra_pass is false), keeping ctx->offset alive for the subsequent extra pass. If JIT compilation fails for a later subprogram, the BPF core aborts and calls bpf_jit_free() to clean up the first subprogram. However, bpf_jit_free() fails to free jit_data->ctx.offset, which causes a memory leak of the JIT context offsets array. So fix this by adding the missing kvfree(jit_data->ctx.offset) in bpf_jit_free().

Засегнати продукти

• Linux Linux: 4ab17e762b34c847478f694932c4cd4b1ac2c343 преди f1557e0a64736b63aed24e285108a7bc3b7de294; 4ab17e762b34c847478f694932c4cd4b1ac2c343 преди 47e20d4b3da97ef3881d1e55e43545c22424f3fc
• Linux Linux: 7.0; преди 7.0; 7.1.6 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-68285
• https://nvd.nist.gov/vuln/detail/CVE-2026-68285
• https://git.kernel.org/stable/c/f1557e0a64736b63aed24e285108a7bc3b7de294
• https://git.kernel.org/stable/c/47e20d4b3da97ef3881d1e55e43545c22424f3fc