In the Linux kernel, the following vulnerability has been resolved:
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association.
Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade rtlaUpgrade kernel-64kUpgrade kernel-64k-debug-develUpgrade rvUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matched | Dec 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 27, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-rt-core | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade dtb-armUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dtb-lgUpgrade kernel-rtUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdso | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-generic | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub