In the Linux kernel, the following vulnerability has been resolved:
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Jann reports that uprobes can be used destructively when used in the middle of an instruction. The kernel only verifies there is a valid instruction at the requested offset, but due to variable instruction length cannot determine if this is an instruction as seen by the intended execution stream.
Additionally, Mark Rutland notes that on architectures that mix data in the text segment (like arm64), a similar things can be done if the data word is 'mistaken' for an instruction.
As such, require CAP_SYS_ADMIN for uprobes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.189-131.206Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.240-238.959Upgrade kernelUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-toolsUpgrade kernel6.12-modules-extra-commonUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel-headersUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extraUpgrade bpftool6.12Upgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade perf6.12Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12Upgrade kernel-modules-extraUpgrade bpftool6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel-tools-debuginfoUpgrade kernel6.12-libbpfUpgrade perfUpgrade kernel6.12Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Sep 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools | Nov 21, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Jul 25, 2025 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-qcomUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade dtb-appleUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-rt-devel | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-fipsUpgrade linux-image-ibmUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-intelUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-genericUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-aws-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-virtual-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracle-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-100-lowlatency-64k | Jul 31, 2025 | Jul 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub