In the Linux kernel, the following vulnerability has been resolved:
powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu'
Commit 176cda0619b6 ("powerpc/perf: Add perf interface to expose vpa counters") introduced 'vpa_pmu' to expose Book3s-HV nested APIv2 provided L1<->L2 context switch latency counters to L1 user-space via perf-events. However the newly introduced PMU named 'vpa_pmu' doesn't assign ownership of the PMU to the module 'vpa_pmu'. Consequently the module 'vpa_pmu' can be unloaded while one of the perf-events are still active, which can lead to kernel oops and panic of the form below on a Pseries-LPAR:
BUG: Kernel NULL pointer dereference on read at 0x00000058 <snip> NIP [c000000000506cb8] event_sched_out+0x40/0x258 LR [c00000000050e8a4] __perf_remove_from_context+0x7c/0x2b0 Call Trace: [c00000025fc3fc30] [c00000025f8457a8] 0xc00000025f8457a8 (unreliable) [c00000025fc3fc80] [fffffffffffffee0] 0xfffffffffffffee0 [c00000025fc3fcd0] [c000000000501e70] event_function+0xa8/0x120 <snip> Kernel panic - not syncing: Aiee, killing interrupt handler!
Fix this by adding the module ownership to 'vpa_pmu' so that the module 'vpa_pmu' is ref-counted and prevented from being unloaded when perf-events are initialized.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-macros | Dec 5, 2025 | Jun 13, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-genericUpgrade linux-image-gcp | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub