In the Linux kernel, the following vulnerability has been resolved:
tracing: Verify event formats that have "%*p.."
The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that will never be freed. If an event references data that was allocated when the event triggered and that same data is freed before the event is read, then the kernel can crash by reading freed memory.
The verifier runs at boot up (or module load) and scans the print formats of the events and checks their arguments to make sure that dereferenced pointers are safe. If the format uses "%*p.." the verifier will ignore it, and that could be dangerous. Cover this case as well.
Also add to the sample code a use case of "%*pbl".
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.187-130.192Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade python3-perf6.12Upgrade python3-perfUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade perf6.12-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-devel | Sep 9, 2025 | May 20, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 28, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-debugUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade kernel-defaultUpgrade dtb-caviumUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-source-azure | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azureUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-64kUpgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-xilinxUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-ibmUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-6.8 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub