https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:47:20 +0000 https://vulnerability.circl.lu/vuln/cve-2025-38723 <p><strong>Affected:</strong> Linux, Siemens SIMATIC CN 4100</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>LoongArch: BPF: Fix jump offset calculation in tailcall</p> <p>The extra pass of bpf_int_jit_compile() skips JIT context initialization which essentially skips offset calculation leaving out_offset = -1, so the jmp_offset in emit_bpf_tail_call is calculated by</p> <p>&#34;#define jmp_offset (out_offset - (cur_offset))&#34;</p> <p>is a negative number, which is wrong. The final generated assembly are as follow.</p> <p>54: bgeu $a2, $t1, -8 # 0x0000004c 58: addi.d $a6, $s5, -1 5c: bltz $a6, -16 # 0x0000004c 60: alsl.d $t2, $a2, $a1, 0x3 64: ld.d $t2, $t2, 264 68: beq $t2, $zero, -28 # 0x0000004c</p> <p>Before apply this patch, the follow test case will reveal soft lock issues.</p> <p>cd tools/testing/selftests/bpf/ ./test_progs --allow=tailcalls/tailcall_bpf2bpf_1</p> <p>dmesg: watchdog: BUG: soft lockup - CPU#2 stuck for 26s! [test_progs:25056]</p> <p><strong>Affected:</strong> Linux, Siemens SIMATIC CN 4100</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>LoongArch: BPF: Fix jump offset calculation in tailcall</p> <p>The extra pass of bpf_int_jit_compile() skips JIT context initialization which essentially skips offset calculation leaving out_offset = -1, so the jmp_offset in emit_bpf_tail_call is calculated by</p> <p>&#34;#define jmp_offset (out_offset - (cur_offset))&#34;</p> <p>is a negative number, which is wrong. The final generated assembly are as follow.</p> <p>54: bgeu $a2, $t1, -8 # 0x0000004c 58: addi.d $a6, $s5, -1 5c: bltz $a6, -16 # 0x0000004c 60: alsl.d $t2, $a2, $a1, 0x3 64: ld.d $t2, $t2, 264 68: beq $t2, $zero, -28 # 0x0000004c</p> <p>Before apply this patch, the follow test case will reveal soft lock issues.</p> <p>cd tools/testing/selftests/bpf/ ./test_progs --allow=tailcalls/tailcall_bpf2bpf_1</p> <p>dmesg: watchdog: BUG: soft lockup - CPU#2 stuck for 26s! [test_progs:25056]</p> https://vulnerability.circl.lu/vuln/cve-2025-38723