In the Linux kernel, the following vulnerability has been resolved:
bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
When BPF_TRAMP_F_CALL_ORIG is set, the trampoline calls __bpf_tramp_enter() and __bpf_tramp_exit() functions, passing them the struct bpf_tramp_image *im pointer as an argument in R0.
The trampoline generation code uses emit_addr_mov_i64() to emit instructions for moving the bpf_tramp_image address into R0, but emit_addr_mov_i64() assumes the address to be in the vmalloc() space and uses only 48 bits. Because bpf_tramp_image is allocated using kzalloc(), its address can use more than 48-bits, in this case the trampoline will pass an invalid address to __bpf_tramp_enter/exit() causing a kernel crash.
Fix this by using emit_a64_mov_i64() in place of emit_addr_mov_i64() as it can work with addresses that are greater than 48-bits.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-libbpf-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python3-perfUpgrade kernel-libbpf | Jun 24, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Nov 26, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade dtb-caviumUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kb | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-kvmUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1019-nvidia-64k | Dec 13, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub