In the Linux kernel, the following vulnerability has been resolved:
ftrace: Do not blindly read the ip address in ftrace_bug()
It was reported that a bug on arm64 caused a bad ip address to be used for updating into a nop in ftrace_init(), but the error path (rightfully) returned -EINVAL and not -EFAULT, as the bug caused more than one error to occur. But because -EINVAL was returned, the ftrace_bug() tried to report what was at the location of the ip address, and read it directly. This caused the machine to panic, as the ip was not pointing to a valid memory address.
Instead, read the ip address with copy_from_kernel_nofault() to safely access the memory, and if it faults, report that the address faulted, otherwise report what was in that location.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftool-debuginfo | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-preemptUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-default-extra | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-gcp-5.4Upgrade linuxUpgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-hweUpgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-raspi | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub