In the Linux kernel, the following vulnerability has been resolved:
tracing: Verify event formats that have "%*p.."
The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that will never be freed. If an event references data that was allocated when the event triggered and that same data is freed before the event is read, then the kernel can crash by reading freed memory.
The verifier runs at boot up (or module load) and scans the print formats of the events and checks their arguments to make sure that dereferenced pointers are safe. If the format uses "%*p.." the verifier will ignore it, and that could be dangerous. Cover this case as well.
Also add to the sample code a use case of "%*pbl".
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.187-130.192Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel6.12Upgrade kernel-headersUpgrade kernel-tools-develUpgrade perf6.12Upgrade perfUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.29-33.102Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf | Sep 9, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-devel | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-kvmUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-ibmUpgrade linux-image-aws-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gke | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub