In the Linux kernel, the following vulnerability has been resolved:
bpf: Remove tst_run from lwt_seg6local_prog_ops.
The syzbot reported that the lwt_seg6 related BPF ops can be invoked via bpf_test_run() without without entering input_action_end_bpf() first.
Martin KaFai Lau said that self test for BPF_PROG_TYPE_LWT_SEG6LOCAL probably didn't work since it was introduced in commit 04d4b274e2a ("ipv6: sr: Add seg6local action End.BPF"). The reason is that the per-CPU variable seg6_bpf_srh_states::srh is never assigned in the self test case but each BPF function expects it.
Remove test_run for BPF_PROG_TYPE_LWT_SEG6LOCAL.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Sep 18, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rt | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04 | Dec 13, 2024 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub