In the Linux kernel, the following vulnerability has been resolved:
bpf: account for current allocated stack depth in widen_imprecise_scalars()
The usage pattern for widen_imprecise_scalars() looks as follows:
prev_st = find_prev_entry(env, ...); queued_st = push_stack(...); widen_imprecise_scalars(env, prev_st, queued_st);
Where prev_st is an ancestor of the queued_st in the explored states tree. This ancestor is not guaranteed to have same allocated stack depth as queued_st. E.g. in the following case:
def main(): for i in 1..2: foo(i) // same callsite, differnt param
def foo(i): if i == 1: use 128 bytes of stack iterator based loop
Here, for a second 'foo' call prev_st->allocated_stack is 128, while queued_st->allocated_stack is much smaller. widen_imprecise_scalars() needs to take this into account and avoid accessing bpf_verifier_state->frame[*]->stack out of bounds.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-livepatch-6.12.63-84.121Upgrade kernel6.12-libbpf-develUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-tools-develUpgrade kernel6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-headersUpgrade kernel6.12-toolsUpgrade bpftool6.12-debuginfo | Feb 20, 2026 | Dec 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 15, 2026 | Dec 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 16, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04Upgrade linux-image-oem-6.17Upgrade linux-image-oracleUpgrade linux-image-oracle-6.17Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-generic-6.17Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-6.17Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-gcp-fipsUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-gcp-6.8Upgrade linux-image-6.17.0-1011-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-raspi-6.17Upgrade linux-image-raspi-6.8Upgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-6.17Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-aws-6.17Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-azure-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-azure-6.17Upgrade linux-image-xilinxUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-realtime-6.8.1 | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub