In the Linux kernel, the following vulnerability has been resolved:
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association.
Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-64k-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-develUpgrade rvUpgrade kernel-64k-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade bpftoolUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modules-core | Dec 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 27, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade kernel-macros | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatency | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub