In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix bpf_sk_select_reuseport() memory leak
As pointed out in the original comment, lookup in sockmap can return a TCP ESTABLISHED socket. Such TCP socket may have had SO_ATTACH_REUSEPORT_EBPF set before it was ESTABLISHED. In other words, a non-NULL sk_reuseport_cb does not imply a non-refcounted socket.
Drop sk's reference in both error paths.
unreferenced object 0xffff888101911800 (size 2048): comm "test_progs", pid 44109, jiffies 4297131437 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 80 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 9336483b): __kmalloc_noprof+0x3bf/0x560 __reuseport_alloc+0x1d/0x40 reuseport_alloc+0xca/0x150 reuseport_attach_prog+0x87/0x140 sk_reuseport_attach_bpf+0xc8/0x100 sk_setsockopt+0x1181/0x1990 do_sock_setsockopt+0x12b/0x160 __sys_setsockopt+0x7b/0xc0 __x64_sys_setsockopt+0x1b/0x30 do_syscall_64+0x93/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade python-perf | Mar 14, 2025 | Jan 31, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade python3-perf | Mar 27, 2025 | Jan 31, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Apr 11, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 7, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Jun 11, 2025 | Jan 31, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 31, 2025 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-rtUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-develUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-obs-qa | May 22, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-genericUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1030-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-oem-24.04bUpgrade linux-image-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04 | Mar 28, 2025 | Jan 31, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub