In the Linux kernel, the following vulnerability has been resolved:
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Jann reports that uprobes can be used destructively when used in the middle of an instruction. The kernel only verifies there is a valid instruction at the requested offset, but due to variable instruction length cannot determine if this is an instruction as seen by the intended execution stream.
Additionally, Mark Rutland notes that on architectures that mix data in the text segment (like arm64), a similar things can be done if the data word is 'mistaken' for an instruction.
As such, require CAP_SYS_ADMIN for uprobes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.189-131.206Upgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-livepatch-5.10.240-238.959Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade bpftool6.12Upgrade kernel-libbpf-staticUpgrade kernel6.12-tools-develUpgrade bpftool-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel6.12-libbpf-develUpgrade perf6.12Upgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel6.12-develUpgrade python3-perfUpgrade kernel6.12-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel-libbpf-debuginfo | Sep 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Nov 21, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Jul 25, 2025 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade dtb-qcomUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade dtb-appleUpgrade dtb-amazonUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-xilinxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-azure-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-virtual-5.15Upgrade linux-image-aws-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-awsUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-ibmUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-genericUpgrade linux-image-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-oracle-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-kvm-5.15Upgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gke-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04 | Jul 31, 2025 | Jul 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub