In the Linux kernel, the following vulnerability has been resolved:
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association.
Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-modules-coreUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade perfUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rtUpgrade kernel-64k-modules-coreUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade rtlaUpgrade kernel-64kUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade rvUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-tools | Dec 4, 2024 | Jun 19, 2024 |
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 27, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64 | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade cluster-md-kmp-rt | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub