Linux Kernel Vulnerability in LoongArch BPF Affecting Performance

CVE-2025-38723

What is CVE-2025-38723?

A vulnerability in the Linux kernel's BPF mechanism associated with LoongArch architectures results in incorrect jump offset calculations during tail calls. This condition arises due to an omitted JIT context initialization in the bpf_int_jit_compile(), leading to a negative jump offset calculation. Such errors can lead to significant performance problems, including soft lockup scenarios in which the CPU becomes unresponsive, as evidenced by test cases indicating stuck CPUs. Users of affected Linux kernel versions should apply updates promptly to mitigate this issue.

References