In the Linux kernel, the following vulnerability has been resolved:
uprobes/x86: Harden uretprobe syscall trampoline check
Jann reported a possible issue when trampoline_check_ip returns address near the bottom of the address space that is allowed to call into the syscall if uretprobes are not set up:
https://lore.kernel.org/bpf/202502081235.5A6F352985@keescook/T/#m9d416df341b8fbc11737dacbcd29f0054413cbbf
Though the mmap minimum address restrictions will typically prevent creating mappings there, let's make sure uretprobe syscall checks for that.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.12.23-29.97Upgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-develUpgrade bpftoolUpgrade kernel6.12Upgrade kernel-libbpfUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfo | Jun 24, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-64kb-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-6.11Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-azure-fde-edgeUpgrade linux-image-azure-fde-6.11Upgrade linux-image-gcpUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-6.11Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-awsUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-realtime | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub