In the Linux kernel, the following vulnerability has been resolved:
bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
In case of malformed relocation record of kind BPF_CORE_TYPE_ID_LOCAL referencing a non-existing BTF type, function bpf_core_calc_relo_insn would cause a null pointer deference.
Fix this by adding a proper check upper in call stack, as malformed relocation records could be passed from user space.
Simplest reproducer is a program:
r0 = 0 exit
With a single relocation record:
.insn_off = 0, /* patch first instruction */ .type_id = 100500, /* this type id does not exist */ .access_str_off = 6, /* offset of string "0" */ .kind = BPF_CORE_TYPE_ID_LOCAL,
See the link for original reproducer or next commit for a test case.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.115-126.197Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade perf | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-54-lowlatency-64k | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub