In the Linux kernel, the following vulnerability has been resolved:
uprobes/x86: Harden uretprobe syscall trampoline check
Jann reported a possible issue when trampoline_check_ip returns address near the bottom of the address space that is allowed to call into the syscall if uretprobes are not set up:
https://lore.kernel.org/bpf/202502081235.5A6F352985@keescook/T/#m9d416df341b8fbc11737dacbcd29f0054413cbbf
Though the mmap minimum address restrictions will typically prevent creating mappings there, let's make sure uretprobe syscall checks for that.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpf-develUpgrade perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.12.23-29.97Upgrade kernel-headersUpgrade kernel6.12-debuginfo | Jun 24, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade kernel-default-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-genericUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-6.11Upgrade linux-image-azure-fde-6.11Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-azure-fde-edgeUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-6.11Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04 | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub