In the Linux kernel, the following vulnerability has been resolved:
bpf: Allow delete from sockmap/sockhash only if update is allowed
We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a map_delete on a sockmap/sockhash.
We don't intend to support this artificial use scenario. Extend the existing verifier allowed-program-type check for updating sockmap/sockhash to also cover deleting from a map.
From now on only BPF programs which were previously allowed to update sockmap/sockhash can delete from these map types.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.219-208.866Upgrade kernel-livepatch-5.15.161-106.159Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64 | Aug 14, 2024 | Jun 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.94-99.176Upgrade kernelUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-libbpf-static | Feb 17, 2025 | Jun 21, 2024 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Jun 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Oct 9, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade kernel-defaultUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-azure-baseUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-renesasUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-64kbUpgrade kernel-rt-vdso | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-intelUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-genericUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-virtualUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-azure-fde | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub