In the Linux kernel, the following vulnerability has been resolved:
bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable
Test case dummy_st_ops/dummy_init_ret_value passes NULL as the first parameter of the test_1() function. Mark this parameter as nullable to make verifier aware of such possibility. Otherwise, NULL check in the test_1() code:
SEC("struct_ops/test_1") int BPF_PROG(test_1, struct bpf_dummy_ops_state *state) { if (!state) return ...;
... access state ... }
Might be removed by verifier, thus triggering NULL pointer dereference under certain conditions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fde | Nov 4, 2024 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub