In the Linux kernel, the following vulnerability has been resolved:
uprobes/x86: Harden uretprobe syscall trampoline check
Jann reported a possible issue when trampoline_check_ip returns address near the bottom of the address space that is allowed to call into the syscall if uretprobes are not set up:
https://lore.kernel.org/bpf/202502081235.5A6F352985@keescook/T/#m9d416df341b8fbc11737dacbcd29f0054413cbbf
Though the mmap minimum address restrictions will typically prevent creating mappings there, let's make sure uretprobe syscall checks for that.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.23-29.97Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-devel | Jun 24, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-kvmsmall-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-azure-fde-edgeUpgrade linux-image-lowlatency-6.11Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-6.11Upgrade linux-image-virtualUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-azureUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-genericUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-generic-64k-hwe-24.04 | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub