linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Check validity of link->type in bpf_link_sh...
CVE-2024-53099 is fixed in 60 products on 1 platform, first by DEBIAN-CVE-2024-53099, released November 25, 2024. It is not reported as exploited. Patch Radar priority: High.
In the Linux kernel, the following vulnerability has been resolved: bpf: Check validity of link->type in bpf_link_show_fdinfo() If a newly-added link type doesn't invoke BPF_LINK_TYPE(), accessing bpf_link_type_strs[link->type] may result in an out-of-bounds access. To spot such missed invocations early in the future, checking the validity of link->type in bpf_link_show_fdinfo() and emitting a warning when such invocations are missed.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| bpftool · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| bpftool · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| bpftool-debuginfo · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| dtb-aarch64 · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-64kb · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-64kb · sles 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-azure · opensuse-leap 15.6 | 6.4.0-150600.8.23.1 | SUSE-SU-2025:0117-1 | Jan 15, 2025 |
| kernel-azure · sles 15.6 | 6.4.0-150600.8.23.1 | SUSE-SU-2025:0117-1 | Jan 15, 2025 |
| kernel-coco · sles 15.6 | 6.4.0-15061.12.coco15sp6.1 | SUSE-SU-2025:0289-1 | Jan 29, 2025 |
| kernel-coco_debug · sles 15.6 | 6.4.0-15061.12.coco15sp6.1 | SUSE-SU-2025:0289-1 | Jan 29, 2025 |
| kernel-debug · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-debuginfo · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-debuginfo-common-aarch64 · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-debuginfo-common-x86_64 · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-default · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-default · sles 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-default-base · opensuse-leap 15.6 | 6.4.0-150600.23.33.1.150600.12.14.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-default-base · sles 15.6 | 6.4.0-150600.23.33.1.150600.12.14.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-devel · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-docs · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-docs · sles 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-headers · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-kvmsmall · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-libbpf · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-libbpf-devel · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-libbpf-static · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-livepatch-6.1.124-134.200 · amzn 2023 | 1.0-0.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-livepatch-SLE15-SP6-RT_Update_7 · sles 15.6 | 1-150600.1.3.1 | SUSE-SU-2025:0153-1 | Jan 17, 2025 |
| kernel-livepatch-SLE15-SP6_Update_7 · sles 15.6 | 1-150600.13.3.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-modules-extra · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-modules-extra-common · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-obs-build · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-obs-build · sles 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-obs-qa · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-rt · opensuse-leap 15.6 | 6.4.0-150600.10.23.1 | SUSE-SU-2025:0153-1 | Jan 17, 2025 |
| kernel-rt_debug · opensuse-leap 15.6 | 6.4.0-150600.10.23.1 | SUSE-SU-2025:0153-1 | Jan 17, 2025 |
| kernel-source · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-source · sles 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-source-azure · opensuse-leap 15.6 | 6.4.0-150600.8.23.1 | SUSE-SU-2025:0117-1 | Jan 15, 2025 |
| kernel-source-azure · sles 15.6 | 6.4.0-150600.8.23.1 | SUSE-SU-2025:0117-1 | Jan 15, 2025 |
| kernel-source-coco · sles 15.6 | 6.4.0-15061.12.coco15sp6.1 | SUSE-SU-2025:0289-1 | Jan 29, 2025 |
| kernel-source-rt · opensuse-leap 15.6 | 6.4.0-150600.10.23.1 | SUSE-SU-2025:0153-1 | Jan 17, 2025 |
| kernel-syms · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-syms · sles 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-syms-azure · opensuse-leap 15.6 | 6.4.0-150600.8.23.1 | SUSE-SU-2025:0117-1 | Jan 15, 2025 |
| kernel-syms-azure · sles 15.6 | 6.4.0-150600.8.23.1 | SUSE-SU-2025:0117-1 | Jan 15, 2025 |
| kernel-syms-coco · sles 15.6 | 6.4.0-15061.12.coco15sp6.1 | SUSE-SU-2025:0289-1 | Jan 29, 2025 |
| kernel-syms-rt · opensuse-leap 15.6 | 6.4.0-150600.10.23.1 | SUSE-SU-2025:0153-1 | Jan 17, 2025 |
| kernel-tools · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-tools-debuginfo · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-tools-devel · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| kernel-uek · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-container · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-container · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-container-debug · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-container-debug · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-core · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-core · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-core · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-core · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-devel · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-devel · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-modules · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-modules · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-modules-extra · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-debug-modules-extra · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-devel · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-devel · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-doc · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-doc · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-modules · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-modules · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-modules-extra · ol 8 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-uek-modules-extra · ol 9 | 0:5.15.0-305.176.4.el9uek | ELSA-2025-20095 | Feb 9, 2025 |
| kernel-zfcpdump · opensuse-leap 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| kernel-zfcpdump · sles 15.6 | 6.4.0-150600.23.33.1 | SUSE-SU-2025:0154-1 | Jan 17, 2025 |
| linux · Debian 12.15 (bookworm) | 6.1.123-1 | DEBIAN-CVE-2024-53099 | Nov 25, 2024 |
| linux · Debian 13.5 (trixie) | 6.11.9-1 | DEBIAN-CVE-2024-53099 | Nov 25, 2024 |
| linux · Debian 14 | 6.11.9-1 | DEBIAN-CVE-2024-53099 | Nov 25, 2024 |
| perf · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| perf-debuginfo · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| python3-perf · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
| python3-perf-debuginfo · amzn 2023 | 6.1.124-134.200.amzn2023 | ALAS2023-2025-809 | Jan 21, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.