In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() set_memory_rox() can fail, leaving memory unprotected. Check return and bail out when bpf_jit_binary_lock_ro() returns an error.
Fix
Patch, vendor advisory and mitigation references on NVD 6
- https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a Patch
- https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5 Patch
- https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a Patch
- https://git.kernel.org/stable/c/08f6c05feb1db21653e98ca84ea04ca032d014c7 Patch
- https://git.kernel.org/stable/c/9fef36cad60d4226f9d06953cd56d1d2f9119730 Patch
- https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5 Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 6
- CwesCWE-252NVD modified 2026-10-21 13:17
- References+2 references (now 7)NVD modified 2026-10-21 13:17
- Cpes+1 CPE criteria (now 1)NVD modified 2026-10-21 13:17
- StatusPublished → ModifiedNVD modified 2026-10-21 13:17
- CVSS7.8 (v3.1, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) → 5.5 (v3.1, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)NVD modified 2026-10-21 13:17
- First seenCVSS 7.8 · linuxNVD modified 2026-10-21 12:34
Affected (CPE criteria) 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References 7
- https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a Patch
- https://git.kernel.org/stable/c/c20d0fa873039bce82d4b1b2ffcda8bb22242790
- https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5 Patch
- https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a Patch
- https://git.kernel.org/stable/c/08f6c05feb1db21653e98ca84ea04ca032d014c7 Patch
- https://git.kernel.org/stable/c/9fef36cad60d4226f9d06953cd56d1d2f9119730 Patch
- https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5 Patch