Riskcovery

CVE-2025-38489

s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again

State
Published
Severity
Not scored
Published
Jul 28, 2025
Updated
May 23, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again

Commit 7ded842b356d ("s390/bpf: Fix bpf_plt pointer arithmetic") has accidentally removed the critical piece of commit c730fce7c70c ("s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL"), causing intermittent kernel panics in e.g. perf's on_switch() prog to reappear.

Restore the fix and add a comment.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c3062bdb859b6e2567e7f5c8cde20c0250bb130f to before 0c7b20f7785cfdd59403333612c90b458b12307cAffected
  • 7ded842b356d151ece8ac4985940438e6d3998bb to before d5629d1af0600f8cc7c9245e8d832a66358ef889Affected
  • 7ded842b356d151ece8ac4985940438e6d3998bb to before a4f9c7846b1ac428921ce9676b1b8c80ed60093cAffected
  • 7ded842b356d151ece8ac4985940438e6d3998bb to before 6a5abf8cf182f577c7ae6c62f14debc9754ec986Affected
  • d3d74e45a060d218fe4b0c9174f0a77517509d8eAffected
  • 6.6.26 to before 6.6.100Affected
  • 6.8.5 to before 6.9Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.6.100 through 6.6.*Not affected
  • 6.12.40 through 6.12.*Not affected
  • 6.15.8 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.