In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix hashtab overflow check on 32-bit arches
The hashtab code relies on roundup_pow_of_two() to compute the number of hash buckets, and contains an overflow check by checking if the resulting value is 0. However, on 32-bit arches, the roundup code itself can overflow by doing a 32-bit left-shift of an unsigned long value, which is undefined behaviour, so it is not guaranteed to truncate neatly. This was triggered by syzbot on the DEVMAP_HASH type, which contains the same check, copied from the hashtab code. So apply the same fix to hashtab, by moving the overflow check to before the roundup.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 26, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools | Jul 23, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade dtb-apmUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-devel | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1179-azureUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oemUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-azureUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.4.0-1134-awsUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-raspiUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-aws | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub