In the Linux kernel, the following vulnerability has been resolved:
bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
After commit 2fd3fb0be1d1 ("kasan, vmalloc: unpoison VM_ALLOC pages after mapping"), non-VM_ALLOC mappings will be marked as accessible in __get_vm_area_node() when KASAN is enabled. But now the flag for ringbuf area is VM_ALLOC, so KASAN will complain out-of-bound access after vmap() returns. Because the ringbuf area is created by mapping allocated pages, so use VM_MAP instead.
After the change, info in /proc/vmallocinfo also changes from [start]-[end] 24576 ringbuf_map_alloc+0x171/0x290 vmalloc user to [start]-[end] 24576 ringbuf_map_alloc+0x171/0x290 vmap user
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.10.102-99.473Upgrade perfUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headers | Aug 2, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Oct 9, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azure | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub