In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix hashtab overflow check on 32-bit arches
The hashtab code relies on roundup_pow_of_two() to compute the number of hash buckets, and contains an overflow check by checking if the resulting value is 0. However, on 32-bit arches, the roundup code itself can overflow by doing a 32-bit left-shift of an unsigned long value, which is undefined behaviour, so it is not guaranteed to truncate neatly. This was triggered by syzbot on the DEVMAP_HASH type, which contains the same check, copied from the hashtab code. So apply the same fix to hashtab, by moving the overflow check to before the roundup.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Jun 26, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libs | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-rtUpgrade dtb-exynosUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-azure-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade dtb-sprdUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-devel | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-4.4.0-1134-awsUpgrade linux-image-raspiUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-intel-iotgUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-227-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1179-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1170-awsUpgrade linux-image-intelUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-6.8.0-1004-gke | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub