In the Linux kernel, the following vulnerability has been resolved:
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program, otherwise the following warning will be reported when a sleepable bpf program manipulates bpf map under interpreter mode (aka bpf_jit_enable=0):
WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ...... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Call Trace: <TASK> ? __warn+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60 ? report_bug+0x1ba/0x1f0 ? handle_bug+0x40/0x80 ? exc_invalid_op+0x18/0x50 ? asm_exc_invalid_op+0x1b/0x20 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0 ? rcu_is_watching+0x23/0x50 ? bpf_map_lookup_elem+0x54/0x60 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernelUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-headersUpgrade kernel-livepatch-5.10.237-230.949 | May 30, 2025 | Mar 26, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | Feb 17, 2025 | Mar 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Jun 26, 2024 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Mar 26, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Mar 26, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Mar 26, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dtb-apmUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-default-extraUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-azureUpgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade dtb-xilinx | Apr 17, 2024 | Mar 26, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-cvmUpgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-azureUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04c | May 17, 2024 | Mar 26, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub