Buffer Overflow Vulnerability in Linux Kernel PowerPC Architecture

CVE-2025-38339

What is CVE-2025-38339?

A vulnerability exists in the Linux kernel affecting the PowerPC architecture during Just-In-Time (JIT) compilation of BPF trampolines. The issue arises within the function responsible for calculating the JIT code size for BPF trampolines, specifically in the arch_bpf_trampoline_size() function. If the number of instructions computed is less than the actual needed during JIT compilation, it can lead to a buffer overflow, resulting in system instability or denial of service. Proper validation and accounting during the dummy pass can help mitigate such risks.

References