Critical KASAN Vulnerability in Linux Kernel Affecting Debian Packages
Summary
CVE-2025-21866: In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC Erhard reported the following KASAN hit while booting his PowerMac G... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the Debian operating system, responsible for managing hardware and system resources. It provides essential services for all other software running on the system. The kernel is designed to be robust and secure, but vulnerabilities can arise, impacting system stability and security. This specific vulnerability affects the kernel's powerpc code-patching functionality, which is crucial for systems like the PowerMac G4.
Vulnerability Detail
In the Linux kernel, a vulnerability was identified in the powerpc code-patching mechanism, where the kernel address sanitizer (KASAN) reported a memory access violation during the boot process of a KASAN-enabled kernel. This issue arises from the improper handling of virtual memory areas allocated for text patching, leading to out-of-bounds memory access. The vulnerability can result in system crashes or unexpected behavior, particularly affecting users of PowerPC architecture systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available.
Conclusion
The KASAN vulnerability in the Linux kernel poses a significant risk to systems, particularly those using PowerPC architecture. It is crucial for users to update their kernels to the patched versions to mitigate potential risks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
KASAN stands for Kernel Address Sanitizer, a memory error detector for the Linux kernel that helps identify memory corruption issues.
This vulnerability can lead to system crashes or unpredictable behavior, especially on systems using PowerPC architecture.
If you are using Debian 11, 12, or 13 with a vulnerable kernel version, your system may be affected. You can check your kernel version using the command 'uname -r'.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file like package-lock.json. Visit https://vulert.com for more information.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
