Description
If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| bpftrace | bpftrace | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bpftrace | 0.21.0-1 | — |
| Debian 13 | bpftrace | 0.21.0-1 | — |
| Debian 12 | bpftrace | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | bpftrace | 0.21.1-1.el9 | RHSA-2024:9188 |
| RHEL 8 | bpftrace | 0.16.0-6.el8_10 | RHSA-2024:8830 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | bpftrace | 0.21.1-1.el9 | ALSA-2024:9188 |
| AlmaLinux 8 | bpftrace | 0.16.0-6.el8_10 | ALSA-2024:8830 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | bpftrace | 0.21.1-1.el9 | RLSA-2024:9188 |
| Rocky Linux 8 | bpftrace | 0.16.0-6.el8_10 | RLSA-2024:8830 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | bpftrace | 0.17.0-1.amzn2023.0.1 | ALAS2023-2024-627 |
| Amazon Linux 2 | bpftrace | 0.12.1-2.amzn2.0.2 | ALAS2-2024-2552 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | bpftrace | 0.20.3-1 | — |
| Azure Linux 2 (CBL-Mariner) | bpftrace | 0.16.0-3 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bpftrace | 0.21.1-1.el9 | ELSA-2024-9188 |
| Oracle Linux 8 | bpftrace | 0.16.0-6.el8_10 | ELSA-2024-8830 |
Advisories 11
- ALSA-2024:9188 Low: bpftrace security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:8830 Low: bpftrace security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:9188 Red Hat Security Advisory: bpftrace security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RHSA-2024:8830 Red Hat Security Advisory: bpftrace security update Red Hat Security Advisories (RHSA) · Mar 18, 2026
- RLSA-2024:9188 Low: bpftrace security update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2024:8830 Low: bpftrace security update Rocky Linux Security Advisories · Feb 4, 2026
- ELSA-2024-9188 Low: bpftrace security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 14, 2024
- WID-SEC-2024-3333 Red Hat Enterprise Linux: Schwachstellen ermöglichen Manipulation von Dateien BSI CERT-Bund (WID) · Nov 11, 2024
- ELSA-2024-8830 Low: bpftrace security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 5, 2024
- ALAS2-2024-2552 Low: bpftrace security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 29, 2024
- ALAS2023-2024-627 Low: bpftrace security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · May 28, 2024