In the Linux kernel, the following vulnerability has been resolved:
bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
struct bpf_plt contains a u64 target field. Currently, the BPF JIT allocator requests an alignment of 4 bytes (sizeof(u32)) for the JIT buffer.
Because the base address of the JIT buffer can be 4-byte aligned (e.g., ending in 0x4 or 0xc), the relative padding logic in build_plt() fails to ensure that target lands on an 8-byte boundary.
This leads to two issues: 1. UBSAN reports misaligned-access warnings when dereferencing the structure. 2. More critically, target is updated concurrently via WRITE_ONCE() in bpf_arch_text_poke() while the JIT'd code executes ldr. On arm64, 64-bit loads/stores are only guaranteed to be single-copy atomic if they are 64-bit aligned. A misaligned target risks a torn read, causing the JIT to jump to a corrupted address.
Fix this by increasing the allocation alignment requirement to 8 bytes (sizeof(u64)) in bpf_jit_binary_pack_alloc(). This anchors the base of the JIT buffer to an 8-byte boundary, allowing the relative padding math in build_plt() to correctly align the target field.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-headersUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool6.12-debuginfoUpgrade perf6.18Upgrade kernel6.12-develUpgrade kernel6.18-libbpf-develUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel6.18-tools-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade bpftool6.18Upgrade python3-perf6.18Upgrade perf6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.12-tools-develUpgrade kernel6.18-toolsUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-libbpfUpgrade kernel6.18Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.18-libbpf-staticUpgrade kernel6.12-libbpfUpgrade kernel-livepatch-6.12.77-99.140Upgrade kernel6.18-headersUpgrade kernel6.18-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade bpftool6.12Upgrade kernel-livepatch-6.18.20-20.229Upgrade kernel6.12-libbpf-staticUpgrade kernel6.18-modules-extraUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.18-develUpgrade python3-perf6.12 | Apr 9, 2026 | Mar 25, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 25, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-gke-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-laptop-23.10Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.8.1 | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 22, 2026 | Mar 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub