PT-2025-16686
CVE-2025-22046
·
Published
2025-02-12
·
Updated
2026-01-21
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A possible issue was reported in the Linux kernel when the trampoline check ip returns an address near the bottom of the address space that is allowed to call into the syscall if uretprobes are not set up. The mmap minimum address restrictions will typically prevent creating mappings in this area, but the uretprobe syscall checks have been hardened to ensure this does not occur.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾