In the Linux kernel, the following vulnerability has been resolved:
bpf: Skip task with pid=1 in send_signal_common()
The following kernel panic can be triggered when a task with pid=1 attaches a prog that attempts to send killing signal to itself, also see [1] for more details:
Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b CPU: 3 PID: 1 Comm: systemd Not tainted 6.1.0-09652-g59fe41b5255f #148 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x100/0x178 lib/dump_stack.c:106 panic+0x2c4/0x60f kernel/panic.c:275 do_exit.cold+0x63/0xe4 kernel/exit.c:789 do_group_exit+0xd4/0x2a0 kernel/exit.c:950 get_signal+0x2460/0x2600 kernel/signal.c:2858 arch_do_signal_or_restart+0x78/0x5d0 arch/x86/kernel/signal.c:306 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296 do_syscall_64+0x44/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd
So skip task with pid=1 in bpf_send_signal_common() to avoid the panic.
[1] https://lore.kernel.org/bpf/[email protected]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.93-55.139Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.167-147.601Upgrade kernel-tools | May 22, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux | Mar 31, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-ibm-5.4Upgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-intel-iot-realtimeUpgrade linux-lowlatencyUpgrade linux-gcp-5.4Upgrade linux-awsUpgrade linux-iotUpgrade linuxUpgrade linux-azure-fde-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-gcpUpgrade linux-nvidiaUpgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-ibmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-intel-iotgUpgrade linux-hwe-5.4Upgrade linux-bluefieldUpgrade linux-aws-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-azureUpgrade linux-raspiUpgrade linux-hwe-5.15 | Apr 1, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub