In the Linux kernel, the following vulnerability has been resolved:
libbpf: Use OPTS_SET() macro in bpf_xdp_query()
When the feature_flags and xdp_zc_max_segs fields were added to the libbpf bpf_xdp_query_opts, the code writing them did not use the OPTS_SET() macro. This causes libbpf to write to those fields unconditionally, which means that programs compiled against an older version of libbpf (with a smaller size of the bpf_xdp_query_opts struct) will have its stack corrupted by libbpf writing out of bounds.
The patch adding the feature_flags field has an early bail out if the feature_flags field is not part of the opts struct (via the OPTS_HAS) macro, but the patch adding xdp_zc_max_segs does not. For consistency, this fix just changes the assignments to both fields to use the OPTS_SET() macro.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azure | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-genericUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04 | Jul 1, 2024 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub