In the Linux kernel, the following vulnerability has been resolved:
bpf: Add the missing BPF_LINK_TYPE invocation for sockmap
There is an out-of-bounds read in bpf_link_show_fdinfo() for the sockmap link fd. Fix it by adding the missing BPF_LINK_TYPE invocation for sockmap link
Also add comments for bpf_link_type to prevent missing updates in the future.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 5, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-oem-24.04b | Feb 20, 2025 | Nov 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub