In the Linux kernel, the following vulnerability has been resolved:
bpf: Propagate error from htab_lock_bucket() to userspace
In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucket_cnt is greater than bucket_size or zero.
Fixing it by stopping batch operation and returning -EBUSY when htab_lock_bucket() fails, and the application can retry or skip the busy batch as needed.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.75-48.135Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 4, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-intel-iotgUpgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-lowlatencyUpgrade linux-nvidiaUpgrade linux-raspiUpgrade linux-kvmUpgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-oracleUpgrade linux-azure-5.15 | Oct 10, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub