In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix hashtab overflow check on 32-bit arches
The hashtab code relies on roundup_pow_of_two() to compute the number of hash buckets, and contains an overflow check by checking if the resulting value is 0. However, on 32-bit arches, the roundup code itself can overflow by doing a 32-bit left-shift of an unsigned long value, which is undefined behaviour, so it is not guaranteed to truncate neatly. This was triggered by syzbot on the DEVMAP_HASH type, which contains the same check, copied from the hashtab code. So apply the same fix to hashtab, by moving the overflow check to before the roundup.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 26, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade kernel-64kbUpgrade dtb-sprdUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-default-manUpgrade dtb-amazonUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dtb-alteraUpgrade kernel-symsUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade dtb-cavium | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-4.15.0-227-genericUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-4.4.0-1134-awsUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-genericUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-intelUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub