In the Linux kernel, the following vulnerability has been resolved:
bpf: Check bloom filter map value size
This patch adds a missing check to bloom filter creating, rejecting values above KMALLOC_MAX_SIZE. This brings the bloom map in line with many other map types.
The lack of this protection can cause kernel crashes for value sizes that overflow int's. Such a crash was caught by syzkaller. The next patch adds more guard-rails at a lower level.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.91-99.172Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-armUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-devel | Jun 13, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-awsUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-oracle | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub