In the Linux kernel, the following vulnerability has been resolved:
bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
bpf_map_lookup_percpu_elem() helper is also available for sleepable bpf program. When BPF JIT is disabled or under 32-bit host, bpf_map_lookup_percpu_elem() will not be inlined. Using it in a sleepable bpf program will trigger the warning in bpf_map_lookup_percpu_elem(), because the bpf program only holds rcu_read_lock_trace lock. Therefore, add the missed check.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perfUpgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-livepatch-6.12.35-55.103Upgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel6.12Upgrade kernel-debuginfoUpgrade perf6.12Upgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftool | Sep 9, 2025 | Jul 4, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 7, 2025 | Jul 4, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade dlm-kmp-defaultUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-symsUpgrade kernel-develUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-default-base | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-oracle-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-azureUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-azure-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-xilinxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-6.14Upgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-6.8 | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub