CVE-2023-52621

bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers

State: Published
Severity: Not scored
Published: Mar 26, 2024
Updated: May 11, 2026
Reserved: Mar 6, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers

These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program, otherwise the following warning will be reported when a sleepable bpf program manipulates bpf map under interpreter mode (aka bpf_jit_enable=0):

WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ...... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Call Trace: <TASK> ? __warn+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60 ? report_bug+0x1ba/0x1f0 ? handle_bug+0x40/0x80 ? exc_invalid_op+0x18/0x50 ? asm_exc_invalid_op+0x1b/0x20 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0 ? rcu_is_watching+0x23/0x50 ? bpf_map_lookup_elem+0x54/0x60 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK>

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1e6c62a8821557720a9b2ea9617359b264f2f67c to before 82f2df94dac1aa9b879e74d1f82ba1b631bdc612Affected 1e6c62a8821557720a9b2ea9617359b264f2f67c to before 3516f93cc63d956e1b290ae4b7bf2586074535a0Affected 1e6c62a8821557720a9b2ea9617359b264f2f67c to before d6d6fe4bb105595118f12abeed4a7bdd450853f3Affected 1e6c62a8821557720a9b2ea9617359b264f2f67c to before 483cb92334cd7f1d5387dccc0ab5d595d27a669dAffected 1e6c62a8821557720a9b2ea9617359b264f2f67c to before c7f1b6146f4a46d727c0d046284c28b6882c6304Affected 1e6c62a8821557720a9b2ea9617359b264f2f67c to before 169410eba271afc9f0fb476d996795aa26770c6dAffected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.237 through 5.10.Not affected 5.15.181 through 5.15.Not affected 6.1.77 through 6.1.Not affected 6.6.16 through 6.6.Not affected 6.7.4 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

1e6c62a8821557720a9b2ea9617359b264f2f67c to before 82f2df94dac1aa9b879e74d1f82ba1b631bdc612Affected
1e6c62a8821557720a9b2ea9617359b264f2f67c to before 3516f93cc63d956e1b290ae4b7bf2586074535a0Affected
1e6c62a8821557720a9b2ea9617359b264f2f67c to before d6d6fe4bb105595118f12abeed4a7bdd450853f3Affected
1e6c62a8821557720a9b2ea9617359b264f2f67c to before 483cb92334cd7f1d5387dccc0ab5d595d27a669dAffected
1e6c62a8821557720a9b2ea9617359b264f2f67c to before c7f1b6146f4a46d727c0d046284c28b6882c6304Affected
1e6c62a8821557720a9b2ea9617359b264f2f67c to before 169410eba271afc9f0fb476d996795aa26770c6dAffected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.237 through 5.10.*Not affected
5.15.181 through 5.15.*Not affected
6.1.77 through 6.1.*Not affected
6.6.16 through 6.6.*Not affected
6.7.4 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.