In the Linux kernel, the following vulnerability has been resolved:
bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
bpf_map_lookup_percpu_elem() helper is also available for sleepable bpf program. When BPF JIT is disabled or under 32-bit host, bpf_map_lookup_percpu_elem() will not be inlined. Using it in a sleepable bpf program will trigger the warning in bpf_map_lookup_percpu_elem(), because the bpf program only holds rcu_read_lock_trace lock. Therefore, add the missed check.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel6.12-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernelUpgrade perf6.12Upgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Sep 9, 2025 | Jul 4, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 7, 2025 | Jul 4, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-azureUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-azure | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-6.14Upgrade linux-image-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-virtualUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04 | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub