In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject %p% format string in bprintf-like helpers
static const char fmt[] = "%p%"; bpf_trace_printk(fmt, sizeof(fmt));
The above BPF program isn't rejected and causes a kernel warning at runtime:
Please remove unsupported %\x00 in format string WARNING: CPU: 1 PID: 7244 at lib/vsprintf.c:2680 format_decode+0x49c/0x5d0
This happens because bpf_bprintf_prepare skips over the second %, detected as punctuation, while processing %p. This patch fixes it by not skipping over punctuation. %\x00 is then processed in the next iteration and rejected.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.191-132.213Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-develUpgrade python3-perf6.12Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftool6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel6.12-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel-livepatch-6.1.147-172.266Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-modules-extraUpgrade perf6.12 | Oct 16, 2025 | Aug 16, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 18, 2025 | Aug 18, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 13, 2025 | Aug 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 16, 2025 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-nvidiaUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-default-devel | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-intelUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-5.15Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-azure-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-gke-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-virtualUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-aws-6.14Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-gcp-6.14Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-5.15 | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Aug 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub