In the Linux kernel, the following vulnerability has been resolved:
bpf: Propagate error from htab_lock_bucket() to userspace
In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucket_cnt is greater than bucket_size or zero.
Fixing it by stopping batch operation and returning -EBUSY when htab_lock_bucket() fails, and the application can retry or skip the busy batch as needed.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.75-48.135Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 4, 2025 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-gkeopUpgrade linux-riscv-5.15Upgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-azureUpgrade linux-intel-iotgUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-oracleUpgrade linux-raspiUpgrade linux-azure-5.15Upgrade linux-gcpUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linuxUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-aws-5.15 | Oct 10, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub