In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject %p% format string in bprintf-like helpers
static const char fmt[] = "%p%"; bpf_trace_printk(fmt, sizeof(fmt));
The above BPF program isn't rejected and causes a kernel warning at runtime:
Please remove unsupported %\x00 in format string WARNING: CPU: 1 PID: 7244 at lib/vsprintf.c:2680 format_decode+0x49c/0x5d0
This happens because bpf_bprintf_prepare skips over the second %, detected as punctuation, while processing %p. This patch fixes it by not skipping over punctuation. %\x00 is then processed in the next iteration and rejected.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.191-132.213Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf-develUpgrade python3-perfUpgrade kernel6.12-develUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel-develUpgrade bpftool6.12-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel-modules-extra-commonUpgrade kernel6.12-libbpfUpgrade bpftool6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-toolsUpgrade kernel6.12-tools-debuginfoUpgrade perfUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel6.12-headersUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra | Oct 16, 2025 | Aug 16, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 18, 2025 | Aug 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 13, 2025 | Aug 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 16, 2025 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-appleUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-64kb-devel | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-gcp-6.14Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-6.14Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oracle-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-6.14Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-ibmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-intelUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-virtual-6.8 | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Aug 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub