In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix re-attachment branch in bpf_tracing_prog_attach
The following case can cause a crash due to missing attach_btf:
1) load rawtp program 2) load fentry program with rawtp as target_fd 3) create tracing link for fentry program with target_fd = 0 4) repeat 3
In the end we have:
- prog->aux->dst_trampoline == NULL - tgt_prog == NULL (because we did not provide target_fd to link_create) - prog->aux->attach_btf == NULL (the program was loaded with attach_prog_fd=X) - the program was loaded for tgt_prog but we have no way to find out which one
BUG: kernel NULL pointer dereference, address: 0000000000000058 Call Trace: <TASK> ? __die+0x20/0x70 ? page_fault_oops+0x15b/0x430 ? fixup_exception+0x22/0x330 ? exc_page_fault+0x6f/0x170 ? asm_exc_page_fault+0x22/0x30 ? bpf_tracing_prog_attach+0x279/0x560 ? btf_obj_id+0x5/0x10 bpf_tracing_prog_attach+0x439/0x560 __sys_bpf+0x1cf4/0x2de0 __x64_sys_bpf+0x1c/0x30 do_syscall_64+0x41/0xf0 entry_SYSCALL_64_after_hwframe+0x6e/0x76
Return -EINVAL in this situation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Apr 26, 2024 | Feb 22, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.75-99.163Upgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Feb 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Feb 22, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-develUpgrade kernel-rt-develUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade dtb-lg | Mar 13, 2024 | Feb 22, 2024 |
| Ubuntu | — | Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-28-lowlatency-64kUpgrade linux-image-6.5.0-1019-azureUpgrade linux-image-6.5.0-1021-oracle-64kUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-6.5.0-28-generic-64kUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-6.5.0-1018-awsUpgrade linux-image-6.5.0-1019-azure-fdeUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1015-nvidiaUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1021-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1060-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1018-gcpUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1020-oemUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1014-laptopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1015-nvidia-64kUpgrade linux-image-6.5.0-28-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-6.5.0-1012-starfiveUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1015-raspiUpgrade linux-image-6.5.0-28-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1057-aws | Mar 12, 2024 | Feb 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub