In the Linux kernel, the following vulnerability has been resolved:
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association.
Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade rtlaUpgrade rvUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-64k-modules-extraUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-64kUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-64k-debugUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-devel | Dec 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 27, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-tools | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade dtb-appleUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kb | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub