A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/lib/bpf/btf_dump.c of the component libbpf. The manipulation leads to use after free. Upgrading to version 5.10.163, 5.15.86, 6.0.16, 6.1.2 and 6.2 is sufficient to resolve this issue. The identifier of the patch is c61650b869e0b6fb0c0a28ed42d928eea969afc8/fbe08093fb2334549859829ef81d42570812597d/8c64a8e76eb85d422af5ec60ccbf26e3ead8c333/a733bf10198eb5bb927890940de8ab457491ed3b/93c660ca40b5d2f7c1b1626e955a8e9fa30e0749. You should upgrade the affected component.
CVSS Details
- CVSS 4.0 Base Score: 5.1 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade libbpf-staticUpgrade kernel-develUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade libbpfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade libbpf-debuginfo | Dec 7, 2022 | Oct 17, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo | Feb 17, 2025 | Oct 13, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 17, 2022 |
| Debian | — | Upgrade libbpf | Jul 30, 2024 | Oct 17, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Jan 6, 2023 | Oct 17, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 17, 2022 |
| Suse | — | Upgrade libbpf0-32bitUpgrade libbpf0Upgrade libbpf1Upgrade libbpf-devel | Feb 16, 2023 | Oct 17, 2022 |
| Ubuntu | — | Upgrade dwarvesUpgrade libbpf0 (Ubuntu Pro)Upgrade dwarves (Ubuntu Pro)Upgrade libbpf-dev | Dec 5, 2022 | Oct 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub