In the Linux kernel, the following vulnerability has been resolved:
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program, otherwise the following warning will be reported when a sleepable bpf program manipulates bpf map under interpreter mode (aka bpf_jit_enable=0):
WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ...... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Call Trace: <TASK> ? __warn+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60 ? report_bug+0x1ba/0x1f0 ? handle_bug+0x40/0x80 ? exc_invalid_op+0x18/0x50 ? asm_exc_invalid_op+0x1b/0x20 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0 ? rcu_is_watching+0x23/0x50 ? bpf_map_lookup_elem+0x54/0x60 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.10.237-230.949Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-devel | May 30, 2025 | Mar 26, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-libbpf | Feb 17, 2025 | Mar 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Jun 26, 2024 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | Mar 26, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Mar 26, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | Mar 26, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-symsUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-devel | Apr 17, 2024 | Mar 26, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04cUpgrade linux-image-awsUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-aws-lts-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.5Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-nvidia-64k-hwe-22.04 | May 17, 2024 | Mar 26, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub