CVE-2025-38489

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the bpf arch text poke() function within the s390/bpf subsystem. A previous fix, introduced by commit c730fce7c70c, was inadvertently removed by commit 7ded842b356d, leading to potential kernel panics, such as those observed in perf’s on switch() program. The issue arises when new addr is NULL within the bpf arch text poke() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.