Security Advisory

CVE-2025-38489

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-28 11:21:53
Last updated 2026-05-23 15:59:52
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again Commit 7ded842b356d ("s390/bpf: Fix bpf_plt pointer arithmetic") has accidentally removed the critical piece of commit c730fce7c70c ("s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL"), causing intermittent kernel panics in e.g. perfs on_switch() prog to reappear. Restore the fix and add a comment.