In the Linux kernel, the following vulnerability has been resolved:
bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
bpf_map_lookup_percpu_elem() helper is also available for sleepable bpf program. When BPF JIT is disabled or under 32-bit host, bpf_map_lookup_percpu_elem() will not be inlined. Using it in a sleepable bpf program will trigger the warning in bpf_map_lookup_percpu_elem(), because the bpf program only holds rcu_read_lock_trace lock. Therefore, add the missed check.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel-modules-extraUpgrade perf6.12Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel6.12-modules-extraUpgrade python3-perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.144-170.251 | Sep 9, 2025 | Jul 4, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 7, 2025 | Jul 4, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-caviumUpgrade kernel-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-azureUpgrade linux-image-aws-6.14Upgrade linux-image-gke-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-ibmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gcp-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-generic-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-xilinxUpgrade linux-image-virtual-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-oracle | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub