In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
Uprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU protection. But it is possible to attach a non-sleepable BPF program to a uprobe, and non-sleepable BPF programs are freed via normal RCU (see __bpf_prog_put_noref()). This leads to UAF of the bpf_prog because a normal RCU grace period does not imply a tasks-trace-RCU grace period.
Fix it by explicitly waiting for a tasks-trace-RCU grace period after removing the attachment of a bpf_prog to a perf_event.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-rt-64k-develUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64kUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-docUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade perfUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-core | Nov 20, 2025 | Nov 11, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-headers | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Dec 27, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade perfUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-s390xUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-modulesUpgrade kernel-debug-devel-matchedUpgrade python3-perf-debuginfo | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-kvmUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-awsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-azure-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04a | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub