SB20260320106 - Improper Access Control in Linux kernel loongarch kernel

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper Access Control (CVE-ID: CVE-2025-71270)

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper error handling in the LoongArch BPF JIT exception recovery mechanism when processing memory access operations triggered by BPF_PROBE_MEM* instructions. A local user can execute a specially crafted BPF program to cause a denial of service.

The vulnerability specifically affects LoongArch architecture systems where BPF programs perform memory access operations that trigger ADEM exceptions. Proper fixup handling was missing in the architecture-specific trap handler prior to the patch.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/73ede654d9daa2ee41bdd17bc62946fc5a0258cb
• https://git.kernel.org/stable/c/9bdc1ab5e4ce6f066119018d8f69631a46f9c5a0
• https://git.kernel.org/stable/c/c2ed4f71e9288f21d5c53ff790270758e60fa5f9
• https://git.kernel.org/stable/c/c49a28068363f3dca439aa5fe4d3b1f8159809fe