CVE-2025-22046

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-22046
In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Harden uretprobe syscall trampoline check Jann reported a possible issue when trampoline_check_ip returns address near the bottom of the address space that is allowed to call into the syscall if uretprobes are not set up: https://lore.kernel.org/bpf/202502081235.5A6F352985@keescook/T/#m9d416df341b8fbc11737dacbcd29f0054413cbbf Though the mmap minimum address restrictions will typically prevent creating mappings there, let's make sure uretprobe syscall checks for that.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/b0065d712049c87e1994c6eac00c6a637e39b325 Patch
https://git.kernel.org/stable/c/c35771342e47d58ab9433f3be1c3c30f2c5fa4f3 Patch
https://git.kernel.org/stable/c/d4e48b8d59fe162938a5004ace698c847e6a3207 Patch
https://git.kernel.org/stable/c/fa6192adc32f4fdfe5b74edd5b210e12afd6ecc0 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

31 Oct 2025, 20:39

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/b0065d712049c87e1994c6eac00c6a637e39b325 - () https://git.kernel.org/stable/c/b0065d712049c87e1994c6eac00c6a637e39b325 - Patch
References () https://git.kernel.org/stable/c/c35771342e47d58ab9433f3be1c3c30f2c5fa4f3 - () https://git.kernel.org/stable/c/c35771342e47d58ab9433f3be1c3c30f2c5fa4f3 - Patch
References () https://git.kernel.org/stable/c/d4e48b8d59fe162938a5004ace698c847e6a3207 - () https://git.kernel.org/stable/c/d4e48b8d59fe162938a5004ace698c847e6a3207 - Patch
References () https://git.kernel.org/stable/c/fa6192adc32f4fdfe5b74edd5b210e12afd6ecc0 - () https://git.kernel.org/stable/c/fa6192adc32f4fdfe5b74edd5b210e12afd6ecc0 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: uprobes/x86: endurecer la llamada al sistema uretprobe trampoline check Jann informó un posible problema cuando trampoline_check_ip devuelve una dirección cerca del final del espacio de direcciones que puede llamar a la llamada al sistema si no se configuran uretprobes: https://lore.kernel.org/bpf/202502081235.5A6F352985@keescook/T/#m9d416df341b8fbc11737dacbcd29f0054413cbbf Aunque las restricciones de dirección mínima de mmap normalmente evitarán la creación de asignaciones allí, asegurémonos de que la llamada al sistema uretprobe lo verifique.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CWE NVD-CWE-noinfo

16 Apr 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-16 15:15

Updated : 2025-10-31 20:39

NVD link : CVE-2025-22046

Mitre link : CVE-2025-22046

CVE.ORG link : CVE-2025-22046

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo