A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-docUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules | May 31, 2024 | Mar 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.43-20.103Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.106-102.504Upgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade perf-debuginfo | Jul 4, 2022 | Mar 25, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade perf | Feb 17, 2025 | Jan 14, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2022 |
| Oracle_linux | — | Upgrade kernel | May 28, 2024 | Jan 14, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Feb 8, 2024 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfo | Jun 17, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source | Oct 26, 2022 | Mar 25, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-41-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1010-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1011-gkeUpgrade linux-image-5.15.0-41-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1013-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-41-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-41-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1012-raspi-nolpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1014-azureUpgrade linux-image-5.15.0-1013-oracleUpgrade linux-image-5.15.0-1013-kvmUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1015-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-41-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1012-raspiUpgrade linux-image-5.15.0-1013-gcp | Jul 14, 2022 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub