In the Linux kernel, the following vulnerability has been resolved:
ftrace: Fix invalid address access in lookup_rec() when index is 0
KASAN reported follow problem:
BUG: KASAN: use-after-free in lookup_rec Read of size 8 at addr ffff000199270ff0 by task modprobe CPU: 2 Comm: modprobe Call trace: kasan_report __asan_load8 lookup_rec ftrace_location arch_check_ftrace_location check_kprobe_address_safe register_kprobe
When checking pg->records[pg->index - 1].ip in lookup_rec(), it can get a pg which is newly added to ftrace_pages_start in ftrace_process_locs(). Before the first pg->index++, index is 0 and accessing pg->records[-1].ip will cause this problem.
Don't check the ip when pg->index is 0.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.104-63.140Upgrade kernel-livepatch-4.14.311-233.529Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.176-157.645Upgrade kernel-devel | Jun 23, 2025 | May 2, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.21-1.45Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade perfUpgrade kernel-libbpf-devel | Jun 24, 2025 | May 2, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-gcp-5.4Upgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-iotUpgrade linux-oracle-5.4Upgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-ibm-5.4Upgrade linux-raspi-5.4Upgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-tegraUpgrade linux-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatencyUpgrade linux-realtimeUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-intel-iot-realtimeUpgrade linux-oracle-5.15Upgrade linux-ibm-5.15Upgrade linux-intel-iotgUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-riscv-5.15Upgrade linux-gkeUpgrade linux-xilinx-zynqmpUpgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-aws-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-gcpUpgrade linux-azure-5.15Upgrade linux-lowlatency-hwe-5.15 | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub