Critical Vulnerability in Linux Kernel: LoongArch BPF Return Value Override
Summary
DEBIAN-CVE-2025-22048: In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Don't override subprog's return value The verifier test calls: div by 0 in subprog triggers a panic at the ld.bu instruction. Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It supports a wide range of architectures, including LoongArch, which is designed for high-performance computing. This vulnerability affects the Linux kernel versions in Debian 13 and 14, specifically related to the BPF (Berkeley Packet Filter) functionality, which is crucial for network packet processing and system monitoring.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the handling of return values for BPF subprograms on the LoongArch architecture. The issue arises from a commit that incorrectly sign-extends the return value from the a5 register to the a0 register, leading to potential system panics when the verifier test 'calls: div by 0 in subprog' is triggered. This flaw can cause instability and unexpected behavior in applications relying on BPF, posing risks to system integrity and security.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate risks.
Conclusion
The vulnerability in the Linux kernel related to BPF return values on the LoongArch architecture poses significant risks to system stability and security. Users are strongly advised to update their systems to the patched version to ensure protection against potential exploits.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves incorrect handling of return values in BPF subprograms on the LoongArch architecture, which can lead to system panics.
You can verify if your system is affected by using tools like Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without any signup.
Exploiting this vulnerability could lead to system instability, unexpected behavior in applications, and potential security risks.
Yes, the vulnerability has been patched in version 6.12.25-1 of the Linux kernel for both Debian 13 and 14.
While there are no specific workarounds, it is crucial to prioritize applying the patch as soon as possible to mitigate risks associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
