In the Linux kernel, the following vulnerability has been resolved:
bpf: Check bloom filter map value size
This patch adds a missing check to bloom filter creating, rejecting values above KMALLOC_MAX_SIZE. This brings the bloom map in line with many other map types.
The lack of this protection can cause kernel crashes for value sizes that overflow int's. Such a crash was caught by syzkaller. The next patch adds more guard-rails at a lower level.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.91-99.172Upgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kernel-docsUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-rt-optional | Jun 13, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-azure | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub