In the Linux kernel, the following vulnerability has been resolved:
bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
In case of malformed relocation record of kind BPF_CORE_TYPE_ID_LOCAL referencing a non-existing BTF type, function bpf_core_calc_relo_insn would cause a null pointer deference.
Fix this by adding a proper check upper in call stack, as malformed relocation records could be passed from user space.
Simplest reproducer is a program:
r0 = 0 exit
With a single relocation record:
.insn_off = 0, /* patch first instruction */ .type_id = 100500, /* this type id does not exist */ .access_str_off = 6, /* offset of string "0" */ .kind = BPF_CORE_TYPE_ID_LOCAL,
See the link for original reproducer or next commit for a test case.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-libbpfUpgrade kernel-devel | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-54-genericUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-kvmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-ibm-classic | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub