CVE-2025-22046
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/04/2025
Last modified:
17/04/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
uprobes/x86: Harden uretprobe syscall trampoline check<br />
<br />
Jann reported a possible issue when trampoline_check_ip returns<br />
address near the bottom of the address space that is allowed to<br />
call into the syscall if uretprobes are not set up:<br />
<br />
https://lore.kernel.org/bpf/202502081235.5A6F352985@keescook/T/#m9d416df341b8fbc11737dacbcd29f0054413cbbf<br />
<br />
Though the mmap minimum address restrictions will typically prevent<br />
creating mappings there, let&#39;s make sure uretprobe syscall checks<br />
for that.