uprobes/x86: Harden uretprobe syscall trampoline check (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.20 % · percentile 10 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Harden uretprobe syscall trampoline check Jann reported a possible issue when trampoline_check_ip returns address near the bottom of the address space that is allowed to call into the syscall if uretprobes are not set up: https://lore.kernel.org/bpf/202502081235.5A6F352985@keescook/T/#m9d416df341b8fbc11737dacbcd29f0054413cbbf Though the mmap minimum address restrictions will typically prevent creating mappings there, let's make sure uretprobe syscall checks for that.
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2025-11247
- GCVE · GCVE-0-2025-22046
CERT-FR advisories
- CERTFR-2025-AVI-0589 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0559 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.11 < 6.12.23cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.13.11cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.14 < 6.14.2
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected ff474a78cef5cb5f32be52fe25b78441327a2e7c < c35771342e47d58ab9433f3be1c3c30f2c5fa4f3 ; affected ff474a78cef5cb5f32be52fe25b78441327a2e7c < b0065d712049c87e1994c6eac00c6a637e39b325 ; affected ff474a78cef5cb5f32be52fe25b78441327a2e7c < d4e48b8d59fe162938a5004ace698c847e6a3207 ; affected ff474a78cef5cb5f32be52fe25b78441327a2e7c < fa6192adc32f4fdfe5b74edd5b210e12afd6ecc0 |
| Linux · Linux | affected 6.11 ; unaffected 0 < 6.11 ; unaffected 6.12.23 ≤ 6.12.* ; unaffected 6.13.11 ≤ 6.13.* ; unaffected 6.14.2 ≤ 6.14.* ; unaffected 6.15 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |