In the Linux kernel, the following vulnerability has been resolved:
bpf: Skip task with pid=1 in send_signal_common()
The following kernel panic can be triggered when a task with pid=1 attaches a prog that attempts to send killing signal to itself, also see [1] for more details:
Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b CPU: 3 PID: 1 Comm: systemd Not tainted 6.1.0-09652-g59fe41b5255f #148 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x100/0x178 lib/dump_stack.c:106 panic+0x2c4/0x60f kernel/panic.c:275 do_exit.cold+0x63/0xe4 kernel/exit.c:789 do_group_exit+0xd4/0x2a0 kernel/exit.c:950 get_signal+0x2460/0x2600 kernel/signal.c:2858 arch_do_signal_or_restart+0x78/0x5d0 arch/x86/kernel/signal.c:306 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296 do_syscall_64+0x44/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd
So skip task with pid=1 in bpf_send_signal_common() to avoid the panic.
[1] https://lore.kernel.org/bpf/[email protected]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.93-55.139Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.167-147.601Upgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo | May 22, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux | Mar 31, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-aws-5.4Upgrade linux-azure-5.4Upgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-raspiUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-nvidiaUpgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-intel-iotgUpgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-raspi-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-gcpUpgrade linux-gkeUpgrade linux-iotUpgrade linux-azure-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linuxUpgrade linux-azure-fde-5.15Upgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-oracle-5.4Upgrade linux-lowlatencyUpgrade linux-awsUpgrade linux-intel-iot-realtime | Apr 1, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub