Linux Kernel uprobes/x86: Uretprobe Syscall Trampoline Check Vulnerability

A vulnerability in the Linux kernel's uprobes subsystem for x86 architecture has been addressed. The issue arose because the trampoline_check_ip function could return an address near the lower limit of the allowed address space for syscall invocations, potentially leading to incorrect behavior if uretprobes were not properly configured. Although the minimum mmap address restrictions usually prevent creating mappings in that range, the kernel has been updated to ensure that uretprobe syscall checks account for this possibility.

Impact

Exploitation of this vulnerability could lead to improper handling of uretprobes, potentially allowing for unintended interactions with syscalls.