In the Linux kernel, the following vulnerability has been resolved:
ftrace: Fix invalid address access in lookup_rec() when index is 0
KASAN reported follow problem:
BUG: KASAN: use-after-free in lookup_rec Read of size 8 at addr ffff000199270ff0 by task modprobe CPU: 2 Comm: modprobe Call trace: kasan_report __asan_load8 lookup_rec ftrace_location arch_check_ftrace_location check_kprobe_address_safe register_kprobe
When checking pg->records[pg->index - 1].ip in lookup_rec(), it can get a pg which is newly added to ftrace_pages_start in ftrace_process_locs(). Before the first pg->index++, index is 0 and accessing pg->records[-1].ip will cause this problem.
Don't check the ip when pg->index is 0.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.311-233.529Upgrade kernel-livepatch-5.15.104-63.140Upgrade kernel-livepatch-5.10.176-157.645Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfo | Jun 23, 2025 | May 2, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-6.1.21-1.45Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfo | Jun 24, 2025 | May 2, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-gcp-5.4Upgrade linuxUpgrade linux-iotUpgrade linux-azure-fipsUpgrade linux-nvidia-tegra-igxUpgrade linux-ibm-5.4Upgrade linux-raspiUpgrade linux-nvidia-tegraUpgrade linux-oracle-5.4Upgrade linux-hwe-5.15Upgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-intel-iotgUpgrade linux-azure-5.4Upgrade linux-ibm-5.15Upgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-riscv-5.15Upgrade linux-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-oracle-5.15 | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub