Kernel Panic Vulnerability in Linux Package: s390/bpf Pointer Arithmetic Issue
Summary
DEBIAN-CVE-2025-38489: In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again Commit 7ded842b356d ("s390/bpf: Fix bpf_plt pointer arithmetic") has accidentally removed... Affects linux versions < 6.12.41-1. Fixed in 6.12.41-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is known for its stability, performance, and security features. However, vulnerabilities can arise, impacting system reliability and security. This specific vulnerability affects the Linux packages in Debian 13 and 14, highlighting a critical issue in the s390/bpf subsystem.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the s390/bpf subsystem, specifically related to the bpf_arch_text_poke() function. The issue originated from a commit that inadvertently removed a crucial fix, leading to intermittent kernel panics during the execution of certain programs, such as perf's on_switch() function. This vulnerability can cause system instability and unexpected crashes, posing a significant risk to users relying on the affected kernel versions.
How To Fix
Minimum fixed version
6.12.41-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workaround has been provided for this vulnerability. Users are advised to apply the patch as soon as it becomes available to mitigate the risk of kernel panics.
Conclusion
The vulnerability identified in the Linux kernel's s390/bpf subsystem poses a significant risk of kernel panics, affecting system stability. Users are strongly encouraged to update to the patched versions to mitigate this risk. Utilizing tools like Vulert can help in monitoring and managing open-source vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability is related to a bug in the s390/bpf subsystem of the Linux kernel, which can lead to kernel panics.
The affected versions are those prior to the fixed versions: 6.12.41-1 for Debian 13 and 6.16.3-1 for Debian 14.
You can check your system's Linux package version using the command dpkg -l | grep linux.
Yes, Vulert can monitor and alert for open-source vulnerabilities in your software using a manifest file like package-lock.json.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
