In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix hashtab overflow check on 32-bit arches
The hashtab code relies on roundup_pow_of_two() to compute the number of hash buckets, and contains an overflow check by checking if the resulting value is 0. However, on 32-bit arches, the roundup code itself can overflow by doing a 32-bit left-shift of an unsigned long value, which is undefined behaviour, so it is not guaranteed to truncate neatly. This was triggered by syzbot on the DEVMAP_HASH type, which contains the same check, copied from the hashtab code. So apply the same fix to hashtab, by moving the overflow check to before the roundup.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Jun 26, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python-perf | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-azure-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade dtb-qcomUpgrade kernel-debugUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade kernel-syms | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-ibm-classicUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-raspiUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-awsUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-azureUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-4.4.0-1134-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-4.15.0-227-generic | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub