In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix out-of-bounds write in trie_get_next_key()
trie_get_next_key() allocates a node stack with size trie->max_prefixlen, while it writes (trie->max_prefixlen + 1) nodes to the stack when it has full paths from the root to leaves. For example, consider a trie with max_prefixlen is 8, and the nodes with key 0x00/0, 0x00/1, 0x00/2, ... 0x00/8 inserted. Subsequent calls to trie_get_next_key with _key with .prefixlen = 8 make 9 nodes be written on the node stack with size 8.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade bpftoolUpgrade kernel-debugUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-64kUpgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-uki-virt-addons | Jan 14, 2025 | Nov 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernelUpgrade python-perfUpgrade kernel-livepatch-5.10.228-219.884Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.227-219.884 | Jan 22, 2025 | Nov 9, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.112-124.190Upgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-tools | Feb 17, 2025 | Nov 9, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 14, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 11, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Feb 11, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jan 15, 2025 | Nov 9, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 17, 2024 | Nov 9, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Feb 10, 2025 | Nov 9, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-nvidiaUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04 | Feb 20, 2025 | Nov 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub