In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a potential use-after-free in bpf_link_free()
After commit 1a80dbcb2dba, bpf_link can be freed by link->ops->dealloc_deferred, but the code still tests and uses link->ops->dealloc afterward, which leads to a use-after-free as reported by syzbot. Actually, one of them should be sufficient, so just call one of them instead of both. Also add a WARN_ON() in case of any problematic implementation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-default-extraUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rt | Aug 14, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-44-generic-64k | Sep 12, 2024 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub