In the Linux kernel, the following vulnerability has been resolved:
ftrace: Fix invalid address access in lookup_rec() when index is 0
KASAN reported follow problem:
BUG: KASAN: use-after-free in lookup_rec Read of size 8 at addr ffff000199270ff0 by task modprobe CPU: 2 Comm: modprobe Call trace: kasan_report __asan_load8 lookup_rec ftrace_location arch_check_ftrace_location check_kprobe_address_safe register_kprobe
When checking pg->records[pg->index - 1].ip in lookup_rec(), it can get a pg which is newly added to ftrace_pages_start in ftrace_process_locs(). Before the first pg->index++, index is 0 and accessing pg->records[-1].ip will cause this problem.
Don't check the ip when pg->index is 0.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.311-233.529Upgrade kernel-livepatch-5.10.176-157.645Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.104-63.140Upgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftool | Jun 23, 2025 | May 2, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.21-1.45Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfo | Jun 24, 2025 | May 2, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-nvidia-tegra-igxUpgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-oracle-5.4Upgrade linux-iotUpgrade linux-raspiUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.4Upgrade linuxUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-nvidia-tegraUpgrade linux-gcp-5.4Upgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-ibmUpgrade linux-gcp-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-oracleUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-fipsUpgrade linux-nvidiaUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-gcp-5.15Upgrade linux-ibm-5.15Upgrade linux-intel-iotgUpgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-gkeUpgrade linux-lowlatency | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub