CVE-2025-22046

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/04/2025
Last modified:
17/04/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> uprobes/x86: Harden uretprobe syscall trampoline check<br /> <br /> Jann reported a possible issue when trampoline_check_ip returns<br /> address near the bottom of the address space that is allowed to<br /> call into the syscall if uretprobes are not set up:<br /> <br /> https://lore.kernel.org/bpf/202502081235.5A6F352985@keescook/T/#m9d416df341b8fbc11737dacbcd29f0054413cbbf<br /> <br /> Though the mmap minimum address restrictions will typically prevent<br /> creating mappings there, let&amp;#39;s make sure uretprobe syscall checks<br /> for that.

Impact