In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix bpf_sk_select_reuseport() memory leak
As pointed out in the original comment, lookup in sockmap can return a TCP ESTABLISHED socket. Such TCP socket may have had SO_ATTACH_REUSEPORT_EBPF set before it was ESTABLISHED. In other words, a non-NULL sk_reuseport_cb does not imply a non-refcounted socket.
Drop sk's reference in both error paths.
unreferenced object 0xffff888101911800 (size 2048): comm "test_progs", pid 44109, jiffies 4297131437 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 80 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 9336483b): __kmalloc_noprof+0x3bf/0x560 __reuseport_alloc+0x1d/0x40 reuseport_alloc+0xca/0x150 reuseport_attach_prog+0x87/0x140 sk_reuseport_attach_bpf+0xc8/0x100 sk_setsockopt+0x1181/0x1990 do_sock_setsockopt+0x12b/0x160 __sys_setsockopt+0x7b/0xc0 __x64_sys_setsockopt+0x1b/0x30 do_syscall_64+0x93/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-livepatch-5.10.234-225.895Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.178-120.178Upgrade kernelUpgrade python-perf-debuginfoUpgrade bpftool | Mar 14, 2025 | Jan 31, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python3-perfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool | Mar 27, 2025 | Jan 31, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Apr 11, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | May 7, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Jun 11, 2025 | Jan 31, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 31, 2025 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade dtb-armUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-baseUpgrade dtb-amazonUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-rt-develUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade kernel-default-develUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-freescale | May 22, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-62-genericUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-intelUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1030-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-oem-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-ibmUpgrade linux-image-gke-5.15 | Mar 28, 2025 | Jan 31, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub