Description
SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding (aka backtracing).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | systemtap | 1.6-1 | — |
| Debian 13 | systemtap | 1.6-1 | — |
| Debian 12 | systemtap | 1.6-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | systemtap +7 | 1.4-6.el6_1.1 | RHSA-2011:0842 |
Advisories 1
- RHSA-2011:0842 Red Hat Security Advisory: systemtap security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 44802 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=702687
- http://sourceware.org/git/?p=systemtap.git%3Ba=commit%3Bh=fa2e3415185a28542d419a641ecd6cddd52e3cd9
- 47934 vdb-entry
- MDVSA-2011:155 vendor-advisory
- RHSA-2011:0842 vendor-advisory
- [oss-security] 20110520 systemtap divide-by-zero issues (CVE-2011-1769, CVE-2011-1781) mailing-list