A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug | May 31, 2024 | Mar 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.43-20.103Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.106-102.504Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jul 4, 2022 | Mar 25, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.10-15.42Upgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-headers | Feb 17, 2025 | Jan 14, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2022 |
| Oracle_linux | — | Upgrade kernel | May 28, 2024 | Jan 14, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Feb 8, 2024 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-headers | Jun 17, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kernel-azure | Oct 26, 2022 | Mar 25, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1015-awsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-41-generic-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1013-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1012-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1013-gcpUpgrade linux-image-5.15.0-1013-oracleUpgrade linux-image-5.15.0-1012-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1014-azureUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-5.15.0-41-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-41-lowlatency-64kUpgrade linux-image-5.15.0-1013-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1010-ibmUpgrade linux-image-5.15.0-41-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1011-gkeUpgrade linux-image-5.15.0-41-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm | Jul 14, 2022 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub