In the Linux kernel, the following vulnerability has been resolved:
bpf: Avoid __bpf_prog_ret0_warn when jit fails
syzkaller reported an issue:
WARNING: CPU: 3 PID: 217 at kernel/bpf/core.c:2357 __bpf_prog_ret0_warn+0xa/0x20 kernel/bpf/core.c:2357 Modules linked in: CPU: 3 UID: 0 PID: 217 Comm: kworker/u32:6 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 RIP: 0010:__bpf_prog_ret0_warn+0xa/0x20 kernel/bpf/core.c:2357 Call Trace: <TASK> bpf_dispatcher_nop_func include/linux/bpf.h:1316 [inline] __bpf_prog_run include/linux/filter.h:718 [inline] bpf_prog_run include/linux/filter.h:725 [inline] cls_bpf_classify+0x74a/0x1110 net/sched/cls_bpf.c:105 ...
When creating bpf program, 'fp->jit_requested' depends on bpf_jit_enable. This issue is triggered because of CONFIG_BPF_JIT_ALWAYS_ON is not set and bpf_jit_enable is set to 1, causing the arch to attempt JIT the prog, but jit failed due to FAULT_INJECTION. As a result, incorrectly treats the program as valid, when the program runs it calls `__bpf_prog_ret0_warn` and triggers the WARN_ON_ONCE(1).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.15.186-128.192Upgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-livepatch-6.12.35-55.103Upgrade python3-perf6.12Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade python3-perfUpgrade bpftoolUpgrade kernel6.12Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-modules-extra | Aug 5, 2025 | Jul 10, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 11, 2025 | Jul 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 24, 2025 | Oct 23, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 14, 2025 | Jul 10, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-intelUpgrade linux-image-virtualUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeopUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gkeop-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-raspiUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-kvmUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-raspi-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-ibm-5.15Upgrade linux-image-gke-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1087-nvidia-lowlatency | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub