In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
Uprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU protection. But it is possible to attach a non-sleepable BPF program to a uprobe, and non-sleepable BPF programs are freed via normal RCU (see __bpf_prog_put_noref()). This leads to UAF of the bpf_prog because a normal RCU grace period does not imply a tasks-trace-RCU grace period.
Fix it by explicitly waiting for a tasks-trace-RCU grace period after removing the attachment of a bpf_prog to a perf_event.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64kUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade kernel-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-docUpgrade kernel-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-64k-debugUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-debugUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade python3-perfUpgrade kernel-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernelUpgrade kernel-64kUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debugUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-cross-headers | Nov 20, 2025 | Nov 11, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.124-134.200Upgrade bpftool-debuginfo | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Dec 27, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade python3-perfUpgrade libperf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade perfUpgrade kernel-debug-uki-virt | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64k | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Dec 27, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub