A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-tools | May 31, 2024 | Mar 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.43-20.103Upgrade bpftool-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.106-102.504Upgrade kernel | Jul 4, 2022 | Mar 25, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perfUpgrade kernel-libbpf | Feb 17, 2025 | Jan 14, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 25, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2022 |
| Oracle_linux | — | Upgrade kernel | May 28, 2024 | Jan 14, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Feb 8, 2024 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debug-modules | Jun 17, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-default-optional | Oct 26, 2022 | Mar 25, 2022 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-5.15.0-41-generic-lpaeUpgrade linux-image-5.15.0-1010-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-raspiUpgrade linux-image-5.15.0-41-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-41-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1011-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1013-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-41-genericUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-41-generic-64kUpgrade linux-image-5.15.0-1015-awsUpgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1012-raspiUpgrade linux-image-5.15.0-1013-gcpUpgrade linux-image-awsUpgrade linux-image-5.15.0-1012-raspi-nolpaeUpgrade linux-image-5.15.0-1013-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1014-azureUpgrade linux-image-5.15.0-1013-oracleUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvm | Jul 14, 2022 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub