PT-2025-16734

CVE-2025-22094

·

Published

2025-03-07

·

Updated

2026-10-17

Description by

CVSS 3.1
7.3
High
MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability in the Linux kernel has been resolved, related to the powerpc/perf component. The issue arises from the introduction of the 'vpa pmu' PMU, which does not assign ownership of the PMU to the module 'vpa pmu'. This can lead to a kernel oops and panic when the module 'vpa pmu' is unloaded while perf-events are still active. The error manifests as a kernel NULL pointer dereference on read, resulting in a kernel panic.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
SUSE-SU-2025:01951-1
SUSE-SU-2025_01951-1
SUSE-SU-2025:01967-1
SUSE-SU-2025_01967-1
SUSE-SU-2025:01972-1
SUSE-SU-2025_01972-1
USN-7594-1
USN-7594-2
USN-7594-3
Found an issue in the description? Have something to add? Feel free to write us 👾