https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2012-0875.htmlhttps://patchthecve.com/cve/CVE-2012-0875.htmlTue, 16 Jun 2026 23:38:26 +0000MEDIUM 5.4: SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensitive information from kernel memory or cause a denial of service (kernel panic and crash) via vectors related to crafted DWARF data, which triggers a read of an invalid pointer.https://patchthecve.com/cve/CVE-2011-2503.htmlhttps://patchthecve.com/cve/CVE-2011-2503.htmlTue, 16 Jun 2026 23:31:28 +0000LOW 3.7: The insert_module function in runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate a module when loading it, which allows local users to gain privileges via a race condition between the signature validation and the module initialihttps://patchthecve.com/cve/CVE-2011-2502.htmlhttps://patchthecve.com/cve/CVE-2011-2502.htmlTue, 16 Jun 2026 23:31:27 +0000MEDIUM 4.4: runtime/staprun/staprun_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a module path is specified by a user for user-space probing, which allows local users in the stapusr group to gain privileges via a crafted module in the search pathttps://patchthecve.com/cve/CVE-2011-1781.htmlhttps://patchthecve.com/cve/CVE-2011-1781.htmlTue, 16 Jun 2026 23:30:01 +0000LOW 1.2: SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding (aka backtracing).https://patchthecve.com/cve/CVE-2011-1769.htmlhttps://patchthecve.com/cve/CVE-2011-1769.htmlTue, 16 Jun 2026 23:29:59 +0000LOW 1.2: SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs context variable access.