In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a potential use-after-free in bpf_link_free()
After commit 1a80dbcb2dba, bpf_link can be freed by link->ops->dealloc_deferred, but the code still tests and uses link->ops->dealloc afterward, which leads to a use-after-free as reported by syzbot. Actually, one of them should be sufficient, so just call one of them instead of both. Also add a WARN_ON() in case of any problematic implementation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 12, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-qcomUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-azure-develUpgrade kernel-debugUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debugUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-default | Aug 14, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-awsUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-azure-fde | Sep 12, 2024 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub