In the Linux kernel, the following vulnerability has been resolved:
ftrace: Also allocate and copy hash for reading of filter files
Currently the reader of set_ftrace_filter and set_ftrace_notrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy of the hash, the reader keeps the pointer to the filter hashes. This is problematic because this pointer is static across function calls that release the locks that can update the global tracer hashes. This can cause UAF and similar bugs.
Allocate and copy the hash for reading the filter files like it is done for the writers. This not only fixes UAF bugs, but also makes the code a bit simpler as it doesn't have to differentiate when to free the iterator's hash between writers and readers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.355-280.695Upgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.191-132.213Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel6.12-libbpfUpgrade perf6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel6.12-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel6.12-libbpf-develUpgrade kernel-tools-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-tools-debuginfoUpgrade bpftool6.12Upgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-develUpgrade kernel-tools-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel-modules-extraUpgrade bpftool6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade python3-perf6.12Upgrade kernel6.12-headersUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel6.12-modules-extraUpgrade kernel-headers | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Dec 12, 2025 | Dec 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Sep 5, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 5, 2025 |
| Ubuntu | — | Upgrade linux-image-fipsUpgrade linux-image-kvmUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-xilinxUpgrade linux-image-aws-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-virtual-5.15Upgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-xilinx-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-kvm-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-aws-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gke-6.8Upgrade linux-image-azureUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04c | Dec 5, 2025 | Sep 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub