In the Linux kernel, the following vulnerability has been resolved:
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program, otherwise the following warning will be reported when a sleepable bpf program manipulates bpf map under interpreter mode (aka bpf_jit_enable=0):
WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ...... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Call Trace: <TASK> ? __warn+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60 ? report_bug+0x1ba/0x1f0 ? handle_bug+0x40/0x80 ? exc_invalid_op+0x18/0x50 ? asm_exc_invalid_op+0x1b/0x20 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0 ? rcu_is_watching+0x23/0x50 ? bpf_map_lookup_elem+0x54/0x60 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-livepatch-5.10.237-230.949Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-devel | May 30, 2025 | Mar 26, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Mar 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jun 26, 2024 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | Mar 26, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Mar 26, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Mar 26, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade kernel-rtUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-default-develUpgrade dtb-apmUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-debugUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdso | Apr 17, 2024 | Mar 26, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-20.04cUpgrade linux-image-virtualUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-127-lowlatency | May 17, 2024 | Mar 26, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub