In the Linux kernel, the following vulnerability has been resolved:
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association.
Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-64kUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade rvUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-docUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-64k-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-debug-devel-matched | Dec 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 27, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-core | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade dtb-armUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-develUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-amazon | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04 | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub