In the Linux kernel, the following vulnerability has been resolved:
libbpf: Prevent null-pointer dereference when prog to load has no BTF
In bpf_objec_load_prog(), there's no guarantee that obj->btf is non-NULL when passing it to btf__fd(), and this function does not perform any check before dereferencing its argument (as bpf_object__btf_fd() used to do). As a consequence, we get segmentation fault errors in bpftool (for example) when trying to load programs that come without BTF information.
v2: Keep btf__fd() in the fix instead of reverting to bpf_object__btf_fd().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-genericUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1013-aws | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub