In the Linux kernel, the following vulnerability has been resolved:
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association.
Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-64k-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-docUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade rtlaUpgrade rvUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-64kUpgrade kernel-toolsUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-modules-extra | Dec 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 27, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-rtUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-kvm | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade kernel-debug-develUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade dtb-armUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-develUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade dtb-marvellUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-rtUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kb | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-oem | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub