In the Linux kernel, the following vulnerability has been resolved:
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Jann reports that uprobes can be used destructively when used in the middle of an instruction. The kernel only verifies there is a valid instruction at the requested offset, but due to variable instruction length cannot determine if this is an instruction as seen by the intended execution stream.
Additionally, Mark Rutland notes that on architectures that mix data in the text segment (like arm64), a similar things can be done if the data word is 'mistaken' for an instruction.
As such, require CAP_SYS_ADMIN for uprobes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.240-238.959Upgrade bpftool-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.189-131.206Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade bpftool | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-toolsUpgrade kernel6.12-tools-develUpgrade bpftool6.12Upgrade kernel6.12-modules-extraUpgrade kernel-debuginfoUpgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-headersUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade kernel6.12Upgrade kernel6.12-develUpgrade kernel-tools-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpfUpgrade python3-perfUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra | Sep 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 28, 2025 | Jul 28, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Nov 21, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Jul 25, 2025 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade kernel-macrosUpgrade dtb-exynosUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-debugUpgrade dtb-apmUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-devel | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-intelUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-gke-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-fipsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-generic-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-xilinxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-raspi-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-aws-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-156-generic | Jul 31, 2025 | Jul 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub