In the Linux kernel, the following vulnerability has been resolved:
bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
In case of malformed relocation record of kind BPF_CORE_TYPE_ID_LOCAL referencing a non-existing BTF type, function bpf_core_calc_relo_insn would cause a null pointer deference.
Fix this by adding a proper check upper in call stack, as malformed relocation records could be passed from user space.
Simplest reproducer is a program:
r0 = 0 exit
With a single relocation record:
.insn_off = 0, /* patch first instruction */ .type_id = 100500, /* this type id does not exist */ .access_str_off = 6, /* offset of string "0" */ .kind = BPF_CORE_TYPE_ID_LOCAL,
See the link for original reproducer or next commit for a test case.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-modules-extra | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azure | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub