In the Linux kernel, the following vulnerability has been resolved:
bpf: Avoid __bpf_prog_ret0_warn when jit fails
syzkaller reported an issue:
WARNING: CPU: 3 PID: 217 at kernel/bpf/core.c:2357 __bpf_prog_ret0_warn+0xa/0x20 kernel/bpf/core.c:2357 Modules linked in: CPU: 3 UID: 0 PID: 217 Comm: kworker/u32:6 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 RIP: 0010:__bpf_prog_ret0_warn+0xa/0x20 kernel/bpf/core.c:2357 Call Trace: <TASK> bpf_dispatcher_nop_func include/linux/bpf.h:1316 [inline] __bpf_prog_run include/linux/filter.h:718 [inline] bpf_prog_run include/linux/filter.h:725 [inline] cls_bpf_classify+0x74a/0x1110 net/sched/cls_bpf.c:105 ...
When creating bpf program, 'fp->jit_requested' depends on bpf_jit_enable. This issue is triggered because of CONFIG_BPF_JIT_ALWAYS_ON is not set and bpf_jit_enable is set to 1, causing the arch to attempt JIT the prog, but jit failed due to FAULT_INJECTION. As a result, incorrectly treats the program as valid, when the program runs it calls `__bpf_prog_ret0_warn` and triggers the WARN_ON_ONCE(1).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.186-128.192Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf6.12-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12Upgrade perfUpgrade python3-perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernel-modules-extra-common | Aug 5, 2025 | Jul 10, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 11, 2025 | Jul 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 24, 2025 | Oct 23, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 14, 2025 | Jul 10, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-cvmUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-generic-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-fips-5.15Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-genericUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-gcp-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azureUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-kvmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.1-1041-realtime | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub