In the Linux kernel, the following vulnerability has been resolved:
bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
set_memory_rox() can fail, leaving memory unprotected.
Check return and bail out when bpf_jit_binary_lock_ro() returns an error.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Dec 12, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Nov 5, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64k | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub