In the Linux kernel, the following vulnerability has been resolved:
ftrace: Do not blindly read the ip address in ftrace_bug()
It was reported that a bug on arm64 caused a bad ip address to be used for updating into a nop in ftrace_init(), but the error path (rightfully) returned -EINVAL and not -EFAULT, as the bug caused more than one error to occur. But because -EINVAL was returned, the ftrace_bug() tried to report what was at the location of the ip address, and read it directly. This caused the machine to panic, as the ip was not pointing to a valid memory address.
Instead, read the ip address with copy_from_kernel_nofault() to safely access the memory, and if it faults, report that the address faulted, otherwise report what was in that location.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.238-182.421 | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-kvmUpgrade linux-awsUpgrade linux-hweUpgrade linux-raspi-5.4Upgrade linuxUpgrade linux-aws-fipsUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-oracle-5.4Upgrade linux-oracleUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-gcp | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub