In the Linux kernel, the following vulnerability has been resolved:
uprobes: fix kernel info leak via "[uprobes]" vma
xol_add_vma() maps the uninitialized page allocated by __create_xol_area() into userspace. On some architectures (x86) this memory is readable even without VM_READ, VM_EXEC results in the same pgprot_t as VM_EXEC|VM_READ, although this doesn't really matter, debugger can read this memory anyway.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-debuginfoUpgrade kernel-headers | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-tools | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Feb 11, 2025 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1140-awsUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-intelUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azureUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oemUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-5.4.0-1138-oracle | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub