Kernel Vulnerability in Linux Affecting s390/bpf Functionality

CVE-2025-38489

What is CVE-2025-38489?

A vulnerability in the Linux kernel related to the s390/bpf subsystem has been identified, arising from an improper handling of the pointer arithmetic in the bpf_plt function. Specifically, the fix for the bpf_arch_text_poke function has reverted, leading to intermittent kernel panics during operations like perf's on_switch() program. This reintroduction of instability necessitates careful attention to the affected components in the Linux environment to maintain system reliability.

References