CVEvulnerability

CVE-2025-38489

5.5 MEDIUM Published 2025-07-28 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-07-28
Last modified
2026-06-17
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again Commit 7ded842b356d ("s390/bpf: Fix bpf_plt pointer arithmetic") has accidentally removed the critical piece of commit c730fce7c70c ("s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL"), causing intermittent kernel panics in e.g. perf's on_switch() prog to reappear. Restore the fix and add a comment.

Affected configurations

• linux linux kernel (>= 6.6.26 < 6.6.100) • linux linux kernel (>= 6.8.5 < 6.9) • linux linux kernel (>= 6.9.1 < 6.12.40) • linux linux kernel (>= 6.13 < 6.15.8) • linux linux kernel 6.9 • linux linux kernel 6.16

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References