In the Linux kernel, the following vulnerability has been resolved:
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Jann reports that uprobes can be used destructively when used in the middle of an instruction. The kernel only verifies there is a valid instruction at the requested offset, but due to variable instruction length cannot determine if this is an instruction as seen by the intended execution stream.
Additionally, Mark Rutland notes that on architectures that mix data in the text segment (like arm64), a similar things can be done if the data word is 'mistaken' for an instruction.
As such, require CAP_SYS_ADMIN for uprobes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.189-131.206Upgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.240-238.959Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade bpftool6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.147-172.266Upgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-libbpfUpgrade kernel6.12-develUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernelUpgrade perf6.12Upgrade kernel6.12-headersUpgrade kernel-headersUpgrade bpftool6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-develUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-tools | Sep 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 28, 2025 | Jul 28, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Nov 21, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Jul 25, 2025 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade dtb-amdUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade dtb-renesasUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade dtb-armUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azure | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-intelUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-virtualUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gke-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-generic-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-xilinxUpgrade linux-image-virtual-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-gcpUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azure-5.15Upgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gkeop-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-realtime-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-oracle-lts-22.04 | Jul 31, 2025 | Jul 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub