In the Linux kernel, the following vulnerability has been resolved:
bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
bpf_map_lookup_percpu_elem() helper is also available for sleepable bpf program. When BPF JIT is disabled or under 32-bit host, bpf_map_lookup_percpu_elem() will not be inlined. Using it in a sleepable bpf program will trigger the warning in bpf_map_lookup_percpu_elem(), because the bpf program only holds rcu_read_lock_trace lock. Therefore, add the missed check.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel6.12Upgrade kernel-toolsUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-develUpgrade kernel-livepatch-6.1.144-170.251Upgrade python3-perfUpgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade perfUpgrade kernel-modules-extra-common | Sep 9, 2025 | Jul 4, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 7, 2025 | Jul 4, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-sourceUpgrade dtb-renesasUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade dtb-lg | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-aws-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-fips-6.8 | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub