In the Linux kernel, the following vulnerability has been resolved:
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program, otherwise the following warning will be reported when a sleepable bpf program manipulates bpf map under interpreter mode (aka bpf_jit_enable=0):
WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ...... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Call Trace: <TASK> ? __warn+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60 ? report_bug+0x1ba/0x1f0 ? handle_bug+0x40/0x80 ? exc_invalid_op+0x18/0x50 ? asm_exc_invalid_op+0x1b/0x20 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0 ? rcu_is_watching+0x23/0x50 ? bpf_map_lookup_elem+0x54/0x60 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.237-230.949 | May 30, 2025 | Mar 26, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.77-99.164Upgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade bpftool | Feb 17, 2025 | Mar 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jun 26, 2024 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | Mar 26, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Mar 26, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Mar 26, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade dtb-sprdUpgrade kernel-64kbUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debugUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kb | Apr 17, 2024 | Mar 26, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-azureUpgrade linux-image-nvidia-6.5Upgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04 | May 17, 2024 | Mar 26, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub