In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix re-attachment branch in bpf_tracing_prog_attach
The following case can cause a crash due to missing attach_btf:
1) load rawtp program 2) load fentry program with rawtp as target_fd 3) create tracing link for fentry program with target_fd = 0 4) repeat 3
In the end we have:
- prog->aux->dst_trampoline == NULL - tgt_prog == NULL (because we did not provide target_fd to link_create) - prog->aux->attach_btf == NULL (the program was loaded with attach_prog_fd=X) - the program was loaded for tgt_prog but we have no way to find out which one
BUG: kernel NULL pointer dereference, address: 0000000000000058 Call Trace: <TASK> ? __die+0x20/0x70 ? page_fault_oops+0x15b/0x430 ? fixup_exception+0x22/0x330 ? exc_page_fault+0x6f/0x170 ? asm_exc_page_fault+0x22/0x30 ? bpf_tracing_prog_attach+0x279/0x560 ? btf_obj_id+0x5/0x10 bpf_tracing_prog_attach+0x439/0x560 __sys_bpf+0x1cf4/0x2de0 __x64_sys_bpf+0x1c/0x30 do_syscall_64+0x41/0xf0 entry_SYSCALL_64_after_hwframe+0x6e/0x76
Return -EINVAL in this situation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Apr 26, 2024 | Feb 22, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade perfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.75-99.163 | Feb 17, 2025 | Feb 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Feb 22, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdso | Mar 13, 2024 | Feb 22, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-28-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1018-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1015-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1014-laptopUpgrade linux-image-6.5.0-1020-oemUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-28-genericUpgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1012-starfiveUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1057-awsUpgrade linux-image-5.15.0-1060-azureUpgrade linux-image-6.5.0-1015-raspiUpgrade linux-image-6.5.0-1019-azure-fdeUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-28-lowlatency-64kUpgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-6.5.0-1015-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1021-oracleUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1021-oracle-64kUpgrade linux-image-6.5.0-1019-azureUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-28-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1018-awsUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04 | Mar 12, 2024 | Feb 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub