In the Linux kernel, the following vulnerability has been resolved:
sock_map: fix a NULL pointer dereference in sock_map_link_update_prog()
The following race condition could trigger a NULL pointer dereference:
sock_map_link_detach(): sock_map_link_update_prog(): mutex_lock(&sockmap_mutex); ... sockmap_link->map = NULL; mutex_unlock(&sockmap_mutex); mutex_lock(&sockmap_mutex); ... sock_map_prog_link_lookup(sockmap_link->map); mutex_unlock(&sockmap_mutex); <continue>
Fix it by adding a NULL pointer check. In this specific case, it makes no sense to update a link which is being released.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws | Feb 20, 2025 | Nov 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub