In the Linux kernel, the following vulnerability has been resolved:
bpf: Add the missing BPF_LINK_TYPE invocation for sockmap
There is an out-of-bounds read in bpf_link_show_fdinfo() for the sockmap link fd. Fix it by adding the missing BPF_LINK_TYPE invocation for sockmap link
Also add comments for bpf_link_type to prevent missing updates in the future.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 5, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual-hwe-24.04 | Feb 20, 2025 | Nov 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub