CVE-2026-93111

This vulnerability affects the Linux kernel BPF subsystem, specifically the tracing_multi trampoline mechanism. The root cause is that the tracing_multi link does not set the ftrace_managed flag, which causes the link to fail release when a tracing_multi link is attached followed by an fentry lin...

CVE-2026-93111 bpf: Mark tracing_multi trampolines as ftrace managed

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark tracingmulti trampolines as ftrace managed Since tracingmulti link does not set ftracemanaged, it would fail to release the tracingmulti link when attaching tracingmulti link and then attaching fentry link. 3.714215...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989906)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989906 advisory. In the Linux kernel, the following vulnerability has been resolved: xdp, net: Fix use-after-free in bpfxdplinkrelease The problem occurs between devgetbyindex and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986786)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986786 advisory. In the Linux kernel, the following vulnerability has been resolved: xdp, net: Fix use-after-free in bpfxdplinkrelease The problem occurs between devgetbyindex and...

UBUNTU-CVE-2024-50260

In the Linux kernel, the following vulnerability has been resolved: sockmap: fix a NULL pointer dereference in sockmaplinkupdateprog The following race condition could trigger a NULL pointer dereference: sockmaplinkdetach: sockmaplinkupdateprog: mutexlock&sockmapmutex; ... sockmaplink-map = NULL;...

PT-2024-33961

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A slab-use-after-free bug has been identified in the Linux kernel, specifically in the netfilter: bpf component. This issue arises when the nf unregister net hook function is deferred after...

DEBIAN-CVE-2021-47299

In the Linux kernel, the following vulnerability has been resolved: xdp, net: Fix use-after-free in bpfxdplinkrelease The problem occurs between devgetbyindex and devxdpattachlink. At this point, devxdpuninstall is called. Then xdp link will not be detached automatically when dev is released. But...

PT-2021-29711

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.54 Description The issue is related to a use-after-free in bpf xdp link release. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25629

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.6 Description: The issue is related to a use-after-free in bpf xdp link release. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-25716

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.54 Description The issue is related to a use-after-free in bpf xdp link release. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29624

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.6 Description The issue is related to a use-after-free in bpf xdp link release. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.9 and fixed in Linux Kerne...

PT-2024-11300 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.13.0 Description: A use-after-free vulnerability has been identified in the Linux kernel, specifically in the bpf xdp link release function. This issue occurs when the dev get by index and dev xdp attach link functions...