In the Linux kernel, the following vulnerability has been resolved:
bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
As the introduction of the support for vsock and unix sockets in sockmap, tls_sw_has_ctx_tx/rx cannot presume the socket passed in must be IS_ICSK. vsock and af_unix sockets have vsock_sock and unix_sock instead of inet_connection_sock. For these sockets, tls_get_ctx may return an invalid pointer and cause page fault in function tls_sw_ctx_rx.
BUG: unable to handle page fault for address: 0000000000040030 Workqueue: vsock-loopback vsock_loopback_work RIP: 0010:sk_psock_strp_data_ready+0x23/0x60 Call Trace: ? __die+0x81/0xc3 ? no_context+0x194/0x350 ? do_page_fault+0x30/0x110 ? async_page_fault+0x3e/0x50 ? sk_psock_strp_data_ready+0x23/0x60 virtio_transport_recv_pkt+0x750/0x800 ? update_load_avg+0x7e/0x620 vsock_loopback_work+0xd0/0x100 process_one_work+0x1a7/0x360 worker_thread+0x30/0x390 ? create_worker+0x1a0/0x1a0 kthread+0x112/0x130 ? __kthread_cancel_work+0x40/0x40 ret_from_fork+0x1f/0x40
v2: - Add IS_ICSK check v3: - Update the commits in Fixes
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Nov 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2025 | Nov 21, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-realtimeUpgrade linux-image-kvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gcp-64k-lts-24.04 | Feb 20, 2025 | Nov 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub