In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix RCU stall in bpf_fd_array_map_clear()
Add a missing cond_resched() in bpf_fd_array_map_clear() loop.
For PROG_ARRAY maps with many entries this loop calls prog_array_map_poke_run() per entry which can be expensive, and without yielding this can cause RCU stalls under load:
rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 30932 Comm: kworker/0:2 Not tainted 6.14.0-13195-g967e8def1100 #2 PREEMPT(undef) Workqueue: events prog_array_map_clear_deferred RIP: 0010:write_comp_data+0x38/0x90 kernel/kcov.c:246 Call Trace: <TASK> prog_array_map_poke_run+0x77/0x380 kernel/bpf/arraymap.c:1096 __fd_array_map_delete_elem+0x197/0x310 kernel/bpf/arraymap.c:925 bpf_fd_array_map_clear kernel/bpf/arraymap.c:1000 [inline] prog_array_map_clear_deferred+0x119/0x1b0 kernel/bpf/arraymap.c:1141 process_one_work+0x898/0x19d0 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x770/0x10b0 kernel/workqueue.c:3400 kthread+0x465/0x880 kernel/kthread.c:464 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x19/0x30 arch/x86/entry/entry_64.S:245 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-headersUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-develUpgrade kernel6.18Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-toolsUpgrade kernel6.18-develUpgrade kernel6.18-modules-extraUpgrade perf6.18-debuginfoUpgrade python3-perf6.18Upgrade bpftool6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade kernel-livepatch-6.18.33-63.124Upgrade bpftool6.18Upgrade kernel6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade perf6.18 | Jul 8, 2026 | Jun 24, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 24, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-bosUpgrade linux-image-azure-fde-7.0Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-7.0Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-gcp-7.0Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-nvidia-7.0Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-awsUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-7.0Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gke-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-oracleUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-gke-7.0Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-7.0Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-xilinxUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-26.04aUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-fips-6.8Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-7.0Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-oem-24.04cUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-kvmUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-oem-20.04bUpgrade linux-image-laptop-23.10Upgrade linux-image-ibm-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gkeopUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-6.8Upgrade linux-image-azureUpgrade linux-image-aws-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-7.0Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-7.0.0-1011-gcp | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub