In the Linux kernel, the following vulnerability has been resolved:
uprobes/x86: Harden uretprobe syscall trampoline check
Jann reported a possible issue when trampoline_check_ip returns address near the bottom of the address space that is allowed to call into the syscall if uretprobes are not set up:
https://lore.kernel.org/bpf/202502081235.5A6F352985@keescook/T/#m9d416df341b8fbc11737dacbcd29f0054413cbbf
Though the mmap minimum address restrictions will typically prevent creating mappings there, let's make sure uretprobe syscall checks for that.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel-livepatch-6.12.23-29.97Upgrade kernel-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel6.12Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-libbpf | Jun 24, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-default-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-genericUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-azure-fde-6.11Upgrade linux-image-oracleUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-azure-fde-edgeUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.11Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04 | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub