CVE-2025-38280

Linux kernel versions 6.15.0-rc4-syzkaller-00040-g8bac8898fe39

The Linux kernel contains a flaw within the bpf subsystem. Specifically, the issue arises when creating a bpf program and the fp->jit requested variable depends on bpf jit enable. This occurs when CONFIG BPF JIT ALWAYS ON is not set and bpf jit enable is set to 1, causing the architecture to attempt JIT compilation of the program. If JIT compilation fails due to fault injection, the program is incorrectly treated as valid, leading to a call to the bpf prog ret0 warn function and triggering a warning.

Linux kernel version 6.15.0-rc4-syzkaller-00040-g8bac8898fe39: Ensure CONFIG BPF JIT ALWAYS ON is set, or if bpf jit enable is set to 1, verify that JIT compilation does not fail due to fault injection.