In the Linux kernel, the following vulnerability has been resolved:
bpf: Allow delete from sockmap/sockhash only if update is allowed
We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a map_delete on a sockmap/sockhash.
We don't intend to support this artificial use scenario. Extend the existing verifier allowed-program-type check for updating sockmap/sockhash to also cover deleting from a map.
From now on only BPF programs which were previously allowed to update sockmap/sockhash can delete from these map types.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.219-208.866Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.15.161-106.159Upgrade bpftoolUpgrade python-perf-debuginfo | Aug 14, 2024 | Jun 21, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.94-99.176Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-develUpgrade bpftool | Feb 17, 2025 | Jun 21, 2024 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Jun 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jun 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 9, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-default | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-intelUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1012-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15 | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub