In the Linux kernel, the following vulnerability has been resolved:
bpf, arm64: Fix address emission with tag-based KASAN enabled
When BPF_TRAMP_F_CALL_ORIG is enabled, the address of a bpf_tramp_image struct on the stack is passed during the size calculation pass and an address on the heap is passed during code generation. This may cause a heap buffer overflow if the heap address is tagged because emit_a64_mov_i64() will emit longer code than it did during the size calculation pass. The same problem could occur without tag-based KASAN if one of the 16-bit words of the stack address happened to be all-ones during the size calculation pass. Fix the problem by assuming the worst case (4 instructions) when calculating the size of the bpf_tramp_image address emission.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Feb 11, 2025 | Nov 8, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia | Feb 20, 2025 | Nov 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub