In the Linux kernel, the following vulnerability has been resolved:
bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable
Test case dummy_st_ops/dummy_init_ret_value passes NULL as the first parameter of the test_1() function. Mark this parameter as nullable to make verifier aware of such possibility. Otherwise, NULL check in the test_1() code:
SEC("struct_ops/test_1") int BPF_PROG(test_1, struct bpf_dummy_ops_state *state) { if (!state) return ...;
... access state ... }
Might be removed by verifier, thus triggering NULL pointer dereference under certain conditions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-genericUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-virtual-hwe-22.04 | Nov 4, 2024 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub