Description
The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 4.17.3-1 | — |
| Debian 13 | linux | 4.17.3-1 | — |
| Debian 12 | linux | 4.17.3-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-riscv +10 | No fix yet | — |
| Ubuntu 18.04 LTS | linux | 4.15.0-166.174 | — |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1118.125 | — |
| Ubuntu 18.04 LTS | linux-azure-4.15 | 4.15.0-1129.142 | — |
| Ubuntu 18.04 LTS | linux-dell300x | 4.15.0-1033.38 | — |
| Ubuntu 18.04 LTS | linux-gcp +11 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp-4.15 | 4.15.0-1114.128 | — |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1105.107 | — |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1085.93 | — |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1101.108 | — |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1118.127 | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2059.61 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2041.45 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1075.84 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2024.26 | — |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-92.103 | LSN-0083-1 |
| Ubuntu Pro 20.04 LTS | linux-aws | 5.4.0-1061.64 | LSN-0083-1 |
| Ubuntu Pro 20.04 LTS | linux-azure | 5.4.0-1065.68 | LSN-0083-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp | 5.4.0-1059.63 | LSN-0083-1 |
| Ubuntu Pro 20.04 LTS | linux-gke | 5.4.0-1057.60 | LSN-0083-1 |
| Ubuntu Pro 20.04 LTS | linux-gkeop | 5.4.0-1029.30 | LSN-0083-1 |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-166.174 | LSN-0083-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1118.125 | LSN-0083-1 |
| Ubuntu Pro 18.04 LTS | linux-gke-5.4 | 5.4.0-1057.60~18.04.1 | LSN-0083-1 |
| Ubuntu Pro 18.04 LTS | linux-gkeop-5.4 | 5.4.0-1029.30~18.04.2 | LSN-0083-1 |
| Ubuntu Pro 18.04 LTS | linux-oem +1 | No fix yet | LSN-0083-1 |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-218.251 | LSN-0083-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1134.148 | LSN-0083-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1118.125~16.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1129.142~16.04.1 | LSN-0083-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1114.128~16.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-166.174~16.04.1 | LSN-0083-1 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1085.93~16.04.1 | — |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1129.142~14.04.1 | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | kernel-docs +5 | 4.12.14-197.105.1 | SUSE-SU-2022:0366-1 |
| SLES 15 | kernel-docs +6 | 4.12.14-150.83.1 | SUSE-SU-2022:0367-1 |
| SLES 12 SP5 | kernel-azure +2 | 4.12.14-16.85.1 | SUSE-SU-2022:0080-1 |
| SLES 12 SP5 | kernel-docs +4 | 4.12.14-122.106.1 | SUSE-SU-2022:0068-1 |
| SLES 12 SP4 | kernel-syms +2 | 4.12.14-95.88.1 | SUSE-SU-2022:0371-1 |
| SLES 12 SP3 | kernel-syms +2 | 4.4.180-94.153.1 | SUSE-SU-2022:0362-1 |
| SLES 12 SP3 | kgraft-patch-SLE12-SP3_Update_37 | 14-2.2 | SUSE-SU-2022:0325-1 |
| SLES 12 SP3 | kgraft-patch-SLE12-SP3_Update_38 | 13-2.2 | SUSE-SU-2022:0325-1 |
| SLES 12 SP3 | kgraft-patch-SLE12-SP3_Update_39 | 10-2.2 | SUSE-SU-2022:0327-1 |
| SLES 12 SP3 | kgraft-patch-SLE12-SP3_Update_40 | 7-2.2 | SUSE-SU-2022:0328-1 |
| SLES 12 SP3 | kgraft-patch-SLE12-SP3_Update_41 | 3-2.2 | SUSE-SU-2022:0329-1 |
| SLES 12 SP3 | kgraft-patch-SLE12-SP3_Update_42 | 1-4.3.1 | SUSE-SU-2022:0362-1 |
Show 18 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP2 | kernel-syms +2 | 4.4.121-92.164.1 | SUSE-SU-2022:0477-1 |
| SLES for SAP 15 SP1 | kernel-docs +4 | 4.12.14-197.105.1 | SUSE-SU-2022:0366-1 |
| SLES for SAP 15 | kernel-docs +5 | 4.12.14-150.83.1 | SUSE-SU-2022:0367-1 |
| SLES for SAP 12 SP5 | kernel-azure +2 | 4.12.14-16.85.1 | SUSE-SU-2022:0080-1 |
| SLES for SAP 12 SP5 | kernel-syms +2 | 4.12.14-122.106.1 | SUSE-SU-2022:0068-1 |
| SLES for SAP 12 SP4 | kernel-syms +2 | 4.12.14-95.88.1 | SUSE-SU-2022:0371-1 |
| SLES for SAP 12 SP3 | kernel-syms +2 | 4.4.180-94.153.1 | SUSE-SU-2022:0362-1 |
| SLES for SAP 12 SP3 | kgraft-patch-SLE12-SP3_Update_37 | 14-2.2 | SUSE-SU-2022:0325-1 |
| SLES for SAP 12 SP3 | kgraft-patch-SLE12-SP3_Update_38 | 13-2.2 | SUSE-SU-2022:0325-1 |
| SLES for SAP 12 SP3 | kgraft-patch-SLE12-SP3_Update_39 | 10-2.2 | SUSE-SU-2022:0327-1 |
| SLES for SAP 12 SP3 | kgraft-patch-SLE12-SP3_Update_40 | 7-2.2 | SUSE-SU-2022:0328-1 |
| SLES for SAP 12 SP3 | kgraft-patch-SLE12-SP3_Update_41 | 3-2.2 | SUSE-SU-2022:0329-1 |
| SLES for SAP 12 SP3 | kgraft-patch-SLE12-SP3_Update_42 | 1-4.3.1 | SUSE-SU-2022:0362-1 |
| SLE Live Patching 15 SP1 | kernel-default | 4.12.14-197.105.1 | SUSE-SU-2022:0366-1 |
| SLE Live Patching 15 SP1 | kernel-livepatch-SLE15-SP1_Update_28 | 1-3.3.1 | SUSE-SU-2022:0366-1 |
| SLE Live Patching 15 | kernel-default | 4.12.14-150.83.1 | SUSE-SU-2022:0367-1 |
| SLE Live Patching 15 | kernel-livepatch-SLE15_Update_22 | 14-2.2 | SUSE-SU-2022:0255-1 |
| SLE Live Patching 15 | kernel-livepatch-SLE15_Update_23 | 13-2.2 | SUSE-SU-2022:0243-1 |
| SLE Live Patching 15 | kernel-livepatch-SLE15_Update_24 | 10-2.2 | SUSE-SU-2022:0237-1 |
| SLE Live Patching 15 | kernel-livepatch-SLE15_Update_25 | 7-2.2 | SUSE-SU-2022:0237-1 |
| SLE Live Patching 15 | kernel-livepatch-SLE15_Update_26 | 2-2.2 | SUSE-SU-2022:0245-1 |
| SLE Live Patching 15 | kernel-livepatch-SLE15_Update_27 | 1-1.5.1 | SUSE-SU-2022:0367-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.106.1 | SUSE-SU-2022:0068-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_27 | 1-8.3.1 | SUSE-SU-2022:0068-1 |
| SLE Live Patching 12 SP4 | kernel-default | 4.12.14-95.88.1 | SUSE-SU-2022:0371-1 |
| SLE Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_18 | 14-2.2 | SUSE-SU-2022:0296-1 |
| SLE Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_19 | 13-2.2 | SUSE-SU-2022:0296-1 |
| SLE Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_20 | 10-2.2 | SUSE-SU-2022:0298-1 |
| SLE Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_21 | 9-2.2 | SUSE-SU-2022:0298-1 |
| SLE Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_22 | 7-2.2 | SUSE-SU-2022:0298-1 |
| SLE Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_23 | 2-2.2 | SUSE-SU-2022:0245-1 |
| SLE Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_24 | 1-6.5.1 | SUSE-SU-2022:0371-1 |
| SLE HPC 15 SP1 | kernel-docs +4 | 4.12.14-197.105.1 | SUSE-SU-2022:0366-1 |
| SLE HPC 15 | kernel-docs +5 | 4.12.14-150.83.1 | SUSE-SU-2022:0367-1 |
| SUSE OpenStack Cloud Crowbar 9 | kernel-syms +2 | 4.12.14-95.88.1 | SUSE-SU-2022:0371-1 |
| SUSE OpenStack Cloud Crowbar 8 | kernel-syms +2 | 4.4.180-94.153.1 | SUSE-SU-2022:0362-1 |
| SUSE OpenStack Cloud Crowbar 8 | kgraft-patch-SLE12-SP3_Update_42 | 1-4.3.1 | SUSE-SU-2022:0362-1 |
| SUSE OpenStack Cloud 9 | kernel-syms +2 | 4.12.14-95.88.1 | SUSE-SU-2022:0371-1 |
| SUSE OpenStack Cloud 8 | kernel-syms +2 | 4.4.180-94.153.1 | SUSE-SU-2022:0362-1 |
| SUSE OpenStack Cloud 8 | kgraft-patch-SLE12-SP3_Update_42 | 1-4.3.1 | SUSE-SU-2022:0362-1 |
| SUSE HPE Helion OpenStack 8 | kernel-syms +2 | 4.4.180-94.153.1 | SUSE-SU-2022:0362-1 |
| SUSE HPE Helion OpenStack 8 | kgraft-patch-SLE12-SP3_Update_42 | 1-4.3.1 | SUSE-SU-2022:0362-1 |
| SUSE Enterprise Storage 6 | kernel-docs +4 | 4.12.14-197.105.1 | SUSE-SU-2022:0366-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.3 | kernel-debug +4 | 4.12.14-197.105.1 | openSUSE-SU-2022:0366-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | kernel-livepatch-4.14.268-205.500 | 1.0-0.amzn2 | ALAS2-2022-1761 |
| Amazon Linux 2 | perf +8 | 4.14.268-205.500.amzn2 | ALAS2-2022-1761 |
Advisories 21
- LSN-0083-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Jun 3, 2026
- SUSE-SU-2022:0328-1 Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0329-1 Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0245-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0327-1 Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0080-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0477-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0362-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2022:0366-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0237-1 Security update for the Linux Kernel (Live Patch 25 for SLE 15) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0367-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0255-1 Security update for the Linux Kernel (Live Patch 22 for SLE 15) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0325-1 Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0371-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0068-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0298-1 Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP4) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0296-1 Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP4) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0243-1 Security update for the Linux Kernel (Live Patch 23 for SLE 15) SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2-2022-1761 Important: kernel security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 2, 2025
- SUSE-SU-2022:0366-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2022-0137 Android Patchday Juni 2022 BSI CERT-Bund (WID) · Jun 24, 2024