A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege (cap_sys_admin or cap_bpf) can modify the frozen mapped address space. This flaw affects kernel versions prior to 5.16 rc2.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Jul 4, 2022 | Jan 21, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 21, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 21, 2022 |
| Suse | — | Upgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-preemptUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-preemptUpgrade dtb-caviumUpgrade kernel-preemptUpgrade dtb-armUpgrade dtb-alUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kselftests-kmp-preemptUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-develUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade kernel-sourceUpgrade dtb-zteUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-preempt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade dlm-kmp-preemptUpgrade dtb-sprdUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-preempt-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade kernel-azureUpgrade dtb-amlogicUpgrade gfs2-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-preempt | Jan 12, 2022 | Jan 5, 2022 |
| Ubuntu | — | Upgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1111-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-5.10.0-1053-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-5.4.0-1023-iotUpgrade linux-image-5.11.0-1028-azureUpgrade linux-image-raspiUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-5.4.0-1117-azureUpgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-virtualUpgrade linux-image-5.14.0-1022-oemUpgrade linux-image-5.4.0-164-genericUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency | Jan 6, 2022 | Jan 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jan 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub