In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
Uprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU protection. But it is possible to attach a non-sleepable BPF program to a uprobe, and non-sleepable BPF programs are freed via normal RCU (see __bpf_prog_put_noref()). This leads to UAF of the bpf_prog because a normal RCU grace period does not imply a tasks-trace-RCU grace period.
Fix it by explicitly waiting for a tasks-trace-RCU grace period after removing the attachment of a bpf_prog to a perf_event.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-develUpgrade kernelUpgrade kernel-rt-64k-develUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-headersUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64kUpgrade kernel-64k-coreUpgrade kernel-rt-64k-modulesUpgrade rtlaUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-develUpgrade kernel-64k-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modulesUpgrade rvUpgrade kernel-docUpgrade kernel-64k-debugUpgrade kernel-rt-64k-coreUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-modules | Nov 20, 2025 | Nov 11, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.124-134.200 | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Dec 27, 2024 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade libperfUpgrade kernel-zfcpdump-debuginfoUpgrade rtlaUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade libperf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-core | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-raspiUpgrade linux-image-azure-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-60-generic | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub