A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege (cap_sys_admin or cap_bpf) can modify the frozen mapped address space. This flaw affects kernel versions prior to 5.16 rc2.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade python-perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfo | Jul 4, 2022 | Jan 21, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 21, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 21, 2022 |
| Suse | — | Upgrade dtb-armUpgrade dlm-kmp-64kbUpgrade dtb-alUpgrade dtb-rockchipUpgrade kernel-develUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kselftests-kmp-preemptUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade kernel-preemptUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade ocfs2-kmp-preemptUpgrade kernel-symsUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-zteUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-preempt-extraUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade dlm-kmp-preemptUpgrade kernel-default-develUpgrade kernel-preempt-livepatch-develUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kernel-preempt-optionalUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-preemptUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade cluster-md-kmp-default | Jan 12, 2022 | Jan 5, 2022 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-5.4.0-1023-iotUpgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-genericUpgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1028-azureUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04bUpgrade linux-image-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1111-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.10.0-1053-oemUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-azureUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1117-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.14.0-1022-oemUpgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-5.4.0-164-genericUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-raspi-hwe-18.04 | Jan 6, 2022 | Jan 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jan 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub