In the Linux kernel, the following vulnerability has been resolved:
bpf: Add oversize check before call kvcalloc()
Commit 7661809d493b ("mm: don't allow oversized kvmalloc() calls") add the oversize check. When the allocation is larger than what kmalloc() supports, the following warning triggered:
WARNING: CPU: 0 PID: 8408 at mm/util.c:597 kvmalloc_node+0x108/0x110 mm/util.c:597 Modules linked in: CPU: 0 PID: 8408 Comm: syz-executor221 Not tainted 5.14.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:kvmalloc_node+0x108/0x110 mm/util.c:597 Call Trace: kvmalloc include/linux/mm.h:806 [inline] kvmalloc_array include/linux/mm.h:824 [inline] kvcalloc include/linux/mm.h:829 [inline] check_btf_line kernel/bpf/verifier.c:9925 [inline] check_btf_info kernel/bpf/verifier.c:10049 [inline] bpf_check+0xd634/0x150d0 kernel/bpf/verifier.c:13759 bpf_prog_load kernel/bpf/syscall.c:2301 [inline] __sys_bpf+0x11181/0x126e0 kernel/bpf/syscall.c:4587 __do_sys_bpf kernel/bpf/syscall.c:4691 [inline] __se_sys_bpf kernel/bpf/syscall.c:4689 [inline] __x64_sys_bpf+0x78/0x90 kernel/bpf/syscall.c:4689 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headers | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade dtb-amazonUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade dtb-apmUpgrade dtb-marvellUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesas | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-raspi-5.4Upgrade linux-ibmUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-azure-fde-5.15Upgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub