In the Linux kernel, the following vulnerability has been resolved:
tracing: Verify event formats that have "%*p.."
The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that will never be freed. If an event references data that was allocated when the event triggered and that same data is freed before the event is read, then the kernel can crash by reading freed memory.
The verifier runs at boot up (or module load) and scans the print formats of the events and checks their arguments to make sure that dereferenced pointers are safe. If the format uses "%*p.." the verifier will ignore it, and that could be dangerous. Cover this case as well.
Also add to the sample code a use case of "%*pbl".
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.15.187-130.192Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-modules-extraUpgrade kernel-libbpfUpgrade kernel-livepatch-6.12.29-33.102Upgrade python3-perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade perfUpgrade python3-perf6.12Upgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-toolsUpgrade perf6.12-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Sep 9, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade dtb-appleUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debug-vdso | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-fipsUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinxUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gkeopUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1004-realtime | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub