In the Linux kernel, the following vulnerability has been resolved:
bpf: Use raw_spinlock_t in ringbuf
The function __bpf_ringbuf_reserve is invoked from a tracepoint, which disables preemption. Using spinlock_t in this context can lead to a "sleep in atomic" warning in the RT variant. This issue is illustrated in the example below:
BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 556208, name: test_progs preempt_count: 1, expected: 0 RCU nest depth: 1, expected: 1 INFO: lockdep is turned off. Preemption disabled at: [<ffffd33a5c88ea44>] migrate_enable+0xc0/0x39c CPU: 7 PID: 556208 Comm: test_progs Tainted: G Hardware name: Qualcomm SA8775P Ride (DT) Call trace: dump_backtrace+0xac/0x130 show_stack+0x1c/0x30 dump_stack_lvl+0xac/0xe8 dump_stack+0x18/0x30 __might_resched+0x3bc/0x4fc rt_spin_lock+0x8c/0x1a4 __bpf_ringbuf_reserve+0xc4/0x254 bpf_ringbuf_reserve_dynptr+0x5c/0xdc bpf_prog_ac3d15160d62622a_test_read_write+0x104/0x238 trace_call_bpf+0x238/0x774 perf_call_bpf_enter.isra.0+0x104/0x194 perf_syscall_enter+0x2f8/0x510 trace_sys_enter+0x39c/0x564 syscall_trace_enter+0x220/0x3c0 do_el0_svc+0x138/0x1dc el0_svc+0x54/0x130 el0t_64_sync_handler+0x134/0x150 el0t_64_sync+0x17c/0x180
Switch the spinlock to raw_spinlock_t to avoid this error.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-libbpf-staticUpgrade kernelUpgrade perfUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf | Mar 27, 2025 | Nov 5, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Feb 11, 2025 | Nov 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 11, 2025 | Nov 5, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 5, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-genericUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-raspiUpgrade linux-image-oem-22.04c | Feb 20, 2025 | Nov 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Nov 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub