In the Linux kernel, the following vulnerability has been resolved:
bpf: Prevent decl_tag from being referenced in func_proto arg
Syzkaller managed to hit another decl_tag issue:
btf_func_proto_check kernel/bpf/btf.c:4506 [inline] btf_check_all_types kernel/bpf/btf.c:4734 [inline] btf_parse_type_sec+0x1175/0x1980 kernel/bpf/btf.c:4763 btf_parse kernel/bpf/btf.c:5042 [inline] btf_new_fd+0x65a/0xb00 kernel/bpf/btf.c:6709 bpf_btf_load+0x6f/0x90 kernel/bpf/syscall.c:4342 __sys_bpf+0x50a/0x6c0 kernel/bpf/syscall.c:5034 __do_sys_bpf kernel/bpf/syscall.c:5093 [inline] __se_sys_bpf kernel/bpf/syscall.c:5091 [inline] __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5091 do_syscall_64+0x54/0x70 arch/x86/entry/common.c:48
This seems similar to commit ea68376c8bed ("bpf: prevent decl_tag from being referenced in func_proto") but for the argument.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 30, 2025 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-nvidiaUpgrade linux-aws-5.15Upgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-oracle-5.15Upgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-xilinx-zynqmpUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-lowlatencyUpgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-hwe-5.4Upgrade linux-aws-5.4Upgrade linux-realtimeUpgrade linux-azure-fde-5.15Upgrade linux-intel-iotgUpgrade linux-gcpUpgrade linux-gcp-5.15Upgrade linux-riscv-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-iotUpgrade linux-azureUpgrade linux-bluefieldUpgrade linuxUpgrade linux-nvidia-tegra-5.15Upgrade linux-hwe-5.15Upgrade linux-intel-iot-realtime | Jan 6, 2026 | Jan 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub