In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix re-attachment branch in bpf_tracing_prog_attach
The following case can cause a crash due to missing attach_btf:
1) load rawtp program 2) load fentry program with rawtp as target_fd 3) create tracing link for fentry program with target_fd = 0 4) repeat 3
In the end we have:
- prog->aux->dst_trampoline == NULL - tgt_prog == NULL (because we did not provide target_fd to link_create) - prog->aux->attach_btf == NULL (the program was loaded with attach_prog_fd=X) - the program was loaded for tgt_prog but we have no way to find out which one
BUG: kernel NULL pointer dereference, address: 0000000000000058 Call Trace: <TASK> ? __die+0x20/0x70 ? page_fault_oops+0x15b/0x430 ? fixup_exception+0x22/0x330 ? exc_page_fault+0x6f/0x170 ? asm_exc_page_fault+0x22/0x30 ? bpf_tracing_prog_attach+0x279/0x560 ? btf_obj_id+0x5/0x10 bpf_tracing_prog_attach+0x439/0x560 __sys_bpf+0x1cf4/0x2de0 __x64_sys_bpf+0x1c/0x30 do_syscall_64+0x41/0xf0 entry_SYSCALL_64_after_hwframe+0x6e/0x76
Return -EINVAL in this situation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-debuginfoUpgrade kernel-devel | Apr 26, 2024 | Feb 22, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.75-99.163Upgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Feb 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Feb 22, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kb | Mar 13, 2024 | Feb 22, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.5.0-28-lowlatencyUpgrade linux-image-6.5.0-1020-oemUpgrade linux-image-azure-cvmUpgrade linux-image-starfiveUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1014-laptopUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-6.5.0-1012-starfiveUpgrade linux-image-6.5.0-28-genericUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1060-azureUpgrade linux-image-6.5.0-1015-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1015-nvidia-64kUpgrade linux-image-6.5.0-1018-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-102-genericUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-6.5.0-1019-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1021-oracle-64kUpgrade linux-image-6.5.0-1021-oracleUpgrade linux-image-6.5.0-28-generic-64kUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-intelUpgrade linux-image-6.5.0-1015-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-6.5.0-1019-azureUpgrade linux-image-6.5.0-1018-awsUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-28-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1040-gkeop | Mar 12, 2024 | Feb 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub