CVE-2025-38489
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2025-07-28
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again Commit 7ded842b356d ("s390/bpf: Fix bpf_plt pointer arithmetic") has accidentally removed the critical piece of commit c730fce7c70c ("s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL"), causing intermittent kernel panics in e.g. perf's on_switch() prog to reappear. Restore the fix and add a comment.
Weakness Classification (1)
Affected Software (22)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | c3062bdb859b6e2567e7f5c8cde20c0250bb130f < 0c7b20f7785cfdd59403333612c90b458b12307c |
| Linux | Linux | 7ded842b356d151ece8ac4985940438e6d3998bb < d5629d1af0600f8cc7c9245e8d832a66358ef889 |
| Linux | Linux | 7ded842b356d151ece8ac4985940438e6d3998bb < a4f9c7846b1ac428921ce9676b1b8c80ed60093c |
| Linux | Linux | 7ded842b356d151ece8ac4985940438e6d3998bb < 6a5abf8cf182f577c7ae6c62f14debc9754ec986 |
| Linux | Linux | d3d74e45a060d218fe4b0c9174f0a77517509d8e |
| Linux | Linux | 6.6.26 < 6.6.100 |
| Linux | Linux | 6.8.5 < 6.9 |
| Linux | Linux | 6.9 |
| linux | linux_kernel | 6.6.26 – 6.6.100 |
| linux | linux_kernel | 6.9 |
| linux | linux_kernel | 6.9 |
| linux | linux_kernel | 6.9 |
| linux | linux_kernel | 6.9 |
| linux | linux_kernel | 6.9 |
| linux | linux_kernel | 6.9 |
| linux | linux_kernel | 6.9 |
| linux | linux_kernel | 6.16 |
| linux | linux_kernel | 6.16 |
| linux | linux_kernel | 6.16 |
| linux | linux_kernel | 6.16 |
| linux | linux_kernel | 6.16 |
| linux | linux_kernel | 6.16 |
References & Advisories (4)
Patch
Patch
Patch
Patch