Critical BPF Verifier Backtracking Bug in Linux Kernel
Summary
DEBIAN-CVE-2025-38279: In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai reported an issue ([1]) where the following warning appears in kerne... Affects linux versions < 6.12.37-1. Fixed in 6.12.37-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is responsible for managing system resources, memory, and processes. The kernel is modular, allowing for the addition of various features and functionalities through loadable modules. However, vulnerabilities in the kernel can lead to severe security risks, including system crashes and unauthorized access.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the BPF (Berkeley Packet Filter) verifier, specifically related to backtracking bookkeeping. This issue arises when the stack pointer register is incorrectly included in the precision tracking, leading to potential system instability and security warnings. The vulnerability was reported by Yi Lai, who observed a warning in the kernel dmesg logs indicating a verifier backtracking bug. If exploited, this vulnerability could result in unexpected behavior or crashes in applications relying on the BPF subsystem.
How To Fix
Minimum fixed version
6.12.37-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate any risks associated with this issue.
Conclusion
The BPF verifier backtracking bug in the Linux kernel poses a significant risk to system stability and security. Users are advised to update to the patched version 6.12.37-1 to protect their systems. Utilizing tools like Vulert can help monitor for vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The bug can lead to system instability and security warnings, potentially affecting applications that utilize the BPF subsystem.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The vulnerability affects the Linux kernel versions prior to 6.12.37-1 in both Debian 13 and Debian 14.
Yes, the patch is available in version 6.12.37-1. Users should update their kernel to this version to mitigate the vulnerability.
While there are no specific workarounds, it is crucial to monitor your system for unusual behavior and apply the patch as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
