In the Linux kernel, the following vulnerability has been resolved:
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Jann reports that uprobes can be used destructively when used in the middle of an instruction. The kernel only verifies there is a valid instruction at the requested offset, but due to variable instruction length cannot determine if this is an instruction as seen by the intended execution stream.
Additionally, Mark Rutland notes that on architectures that mix data in the text segment (like arm64), a similar things can be done if the data word is 'mistaken' for an instruction.
As such, require CAP_SYS_ADMIN for uprobes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.240-238.959Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.189-131.206Upgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade python3-perf6.12Upgrade bpftoolUpgrade bpftool6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel6.12Upgrade kernel6.12-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel6.12-libbpfUpgrade kernel-livepatch-6.1.147-172.266Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.40-63.114Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-headersUpgrade kernel-libbpfUpgrade python3-perf6.12-debuginfoUpgrade kernelUpgrade kernel6.12-toolsUpgrade bpftool-debuginfoUpgrade perf6.12 | Sep 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | Nov 21, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Jul 25, 2025 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade dtb-armUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optional | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-intelUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracle-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-fips-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-azureUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-aws-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-156-generic-64k | Jul 31, 2025 | Jul 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 25, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub