In the Linux kernel, the following vulnerability has been resolved:
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Jann reports that uprobes can be used destructively when used in the middle of an instruction. The kernel only verifies there is a valid instruction at the requested offset, but due to variable instruction length cannot determine if this is an instruction as seen by the intended execution stream.
Additionally, Mark Rutland notes that on architectures that mix data in the text segment (like arm64), a similar things can be done if the data word is 'mistaken' for an instruction.
As such, require CAP_SYS_ADMIN for uprobes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.189-131.206Upgrade kernel-livepatch-5.10.240-238.959Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-libbpf-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade bpftool6.12Upgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-tools-develUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12-headersUpgrade kernel6.12-modules-extraUpgrade kernel6.12-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.147-172.266Upgrade perfUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel6.12-libbpfUpgrade python3-perfUpgrade kernel-develUpgrade perf6.12-debuginfoUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftool6.12-debuginfoUpgrade bpftoolUpgrade python3-perf6.12Upgrade kernel6.12-develUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel6.12-libbpf-static | Sep 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Nov 21, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Jul 25, 2025 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade dtb-alteraUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kselftests-kmp-default | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gke-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-xilinxUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-awsUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-azure-5.15Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-aws-fips-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-intelUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gkeUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-fips-5.15 | Jul 31, 2025 | Jul 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub