In the Linux kernel, the following vulnerability has been resolved:
ftrace: Also allocate and copy hash for reading of filter files
Currently the reader of set_ftrace_filter and set_ftrace_notrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy of the hash, the reader keeps the pointer to the filter hashes. This is problematic because this pointer is static across function calls that release the locks that can update the global tracer hashes. This can cause UAF and similar bugs.
Allocate and copy the hash for reading the filter files like it is done for the writers. This not only fixes UAF bugs, but also makes the code a bit simpler as it doesn't have to differentiate when to free the iterator's hash between writers and readers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.355-280.695Upgrade bpftoolUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-headersUpgrade kernel-livepatch-5.15.191-132.213Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel6.12-modules-extra-commonUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-headersUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade bpftool6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade perf6.12Upgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel6.12-tools-develUpgrade kernel6.12-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.150-174.273Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernelUpgrade perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpfUpgrade python3-perf6.12-debuginfoUpgrade bpftool6.12Upgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-devel | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Dec 12, 2025 | Dec 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Sep 5, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 5, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-intelUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-awsUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-azure-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-aws-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-xilinxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64kUpgrade linux-image-azure-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-aws-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-5.15Upgrade linux-image-gke-6.8 | Dec 5, 2025 | Sep 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub