PT-2026-2870 · Linux+2 · Linux Kernel+2

CVE-2025-71109

·

Published

2025-01-01

·

Updated

2026-08-30

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel's ftrace functionality on MIPS architecture. A buffer overflow can occur when the kernel is located beyond 32 bits, due to the use of the UASM i LA mostly macro generating more than two instructions. This can lead to corruption of variables in the read mostly section, such as the cpu primary thread mask variable, potentially causing a system hang during boot. The issue arises from an assumption in the ftrace code that no more than two instructions would be generated. The fix prevents instruction generation if it could exceed two instructions in length.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12432
CVE-2025-71109
ECHO-C145-1AD7-8FAB
OESA-2026-2676
OESA-2026-3157
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1
USN-8440-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu