In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix verifier assumptions about socket->sk
The verifier assumes that 'sk' field in 'struct socket' is valid and non-NULL when 'socket' pointer itself is trusted and non-NULL. That may not be the case when socket was just created and passed to LSM socket_accept hook. Fix this verifier assumption and adjust tests.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade dtb-apmUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azureUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-azure-fde | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub