In the Linux kernel, the following vulnerability has been resolved:
bpf: Propagate error from htab_lock_bucket() to userspace
In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucket_cnt is greater than bucket_size or zero.
Fixing it by stopping batch operation and returning -EBUSY when htab_lock_bucket() fails, and the application can retry or skip the busy batch as needed.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.75-48.135Upgrade bpftool-debuginfoUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 4, 2025 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-lowlatencyUpgrade linux-intel-iotg-5.15Upgrade linux-azureUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-raspiUpgrade linux-realtimeUpgrade linux-riscv-5.15Upgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linuxUpgrade linux-gkeUpgrade linux-aws-5.15 | Oct 10, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub