In the Linux kernel, the following vulnerability has been resolved:
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association.
Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-uki-virtUpgrade kernel-headersUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-abi-stablelistsUpgrade perfUpgrade python3-perfUpgrade kernel-64k-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade rtlaUpgrade kernel-tools-libsUpgrade bpftoolUpgrade rvUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-cross-headers | Dec 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 27, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-coreUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-modules | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-appleUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azure | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-gcp | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub