Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989114)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989114 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Check for any of tcpbpfprots when cloning a listener A listening socket linked to a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989869)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989869 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Check for any of tcpbpfprots when cloning a listener A listening socket linked to a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989777 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Allow delete from sockmap/sockhash only if update is allowed We have seen an influx of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989313 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix double uncharge the mem of skmsg If tcpbpfsendmsg is running during a tear down...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bpf: fixed the ktls panic with sockmap 2172.936997 ------------ Cut here ------------ 2172.936999 Kernel BUG at lib/ioviter.c:629! ...... 2172.944996 PKRU: 55555554 2172.945155 Call Trace: 2172.945299 2172.945428 ? die+0x36/0x...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38662)

bpf: Allow delete from sockmap/sockhash only if update is allowed. We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a mapdelete on a sockmap/sockhash. We don't intend to support this artificial use scenario...

Siemens SIMATIC Devices Improper Locking (CVE-2024-35895)

"In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using corpuses where a BPF tracing program deletes elements from a sockmap/sockhash map. Because BPF tracing programs can be invoked from any...

SUSE CVE-2025-38165

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987627)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987627 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix double uncharge the mem of skmsg If tcpbpfsendmsg is running during a tear down...

Exploit for CVE-2025-39913

PoC exploit for CVE-2025-39913, an exploit module targeting a me...

Linux Distros Unpatched Vulnerability : CVE-2022-50536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix repeated calls to sockput when msg has moredata In tcpbpfsendverdict...

CVE-2022-50536

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix repeated calls to sockput when msg has moredata In tcpbpfsendverdict redirection, the eval variable is assigned to SKREDIRECT after the applybytes data is sent, if msg has moredata, sockput will be called multip...

EUVD-2025-32819

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix repeated calls to sockput when msg has moredata In tcpbpfsendverdict redirection, the eval variable is assigned to SKREDIRECT after the applybytes data is sent, if msg has moredata, sockput will be called multip...

CVE-2022-50536

CVE-2022-50536 affects the Linux kernel’s BPF sockmap path. In tcp_bpf_send_verdict() redirection, the eval variable is set to __SK_REDIRECT after sending apply_bytes data; if msg.has_more_data, sock_put() can be called multiple times, risking a use-after-free via refcount misuse. The issue is fi...

CVE-2022-50536 bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix repeated calls to sockput when msg has moredata In tcpbpfsendverdict redirection, the eval variable is assigned to SKREDIRECT after the applybytes data is sent, if msg has moredata, sockput will be called multip...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-411908)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-411908 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using corpuse...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987373 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix potential memory leak on unlikely error case If skblinearize is needed and fail...

PT-2025-41041

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0 1 Description The Linux kernel contains a flaw in the bpf, sockmap subsystem related to repeated calls to sock put when a message has more data. Specifically, in the tcp bpf send verdict redirection, the ev...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-393208)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-393208 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpfmsgpopdata Several fixes to bpfmsgpopdata, 1. In skmsgshiftleft...