In the Linux kernel, the following vulnerability has been resolved:
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program, otherwise the following warning will be reported when a sleepable bpf program manipulates bpf map under interpreter mode (aka bpf_jit_enable=0):
WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ...... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Call Trace: <TASK> ? __warn+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60 ? report_bug+0x1ba/0x1f0 ? handle_bug+0x40/0x80 ? exc_invalid_op+0x18/0x50 ? asm_exc_invalid_op+0x1b/0x20 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0 ? rcu_is_watching+0x23/0x50 ? bpf_map_lookup_elem+0x54/0x60 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.184-125.190Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.10.237-230.949Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf | May 30, 2025 | Mar 26, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.77-99.164Upgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpf | Feb 17, 2025 | Mar 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Jun 26, 2024 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Mar 26, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Mar 26, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | Mar 26, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-develUpgrade dtb-sprdUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debugUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-default-livepatch-devel | Apr 17, 2024 | Mar 26, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-nvidia-6.5Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15 | May 17, 2024 | Mar 26, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub