In the Linux kernel, the following vulnerability has been resolved:
powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu'
Commit 176cda0619b6 ("powerpc/perf: Add perf interface to expose vpa counters") introduced 'vpa_pmu' to expose Book3s-HV nested APIv2 provided L1<->L2 context switch latency counters to L1 user-space via perf-events. However the newly introduced PMU named 'vpa_pmu' doesn't assign ownership of the PMU to the module 'vpa_pmu'. Consequently the module 'vpa_pmu' can be unloaded while one of the perf-events are still active, which can lead to kernel oops and panic of the form below on a Pseries-LPAR:
BUG: Kernel NULL pointer dereference on read at 0x00000058 <snip> NIP [c000000000506cb8] event_sched_out+0x40/0x258 LR [c00000000050e8a4] __perf_remove_from_context+0x7c/0x2b0 Call Trace: [c00000025fc3fc30] [c00000025f8457a8] 0xc00000025f8457a8 (unreliable) [c00000025fc3fc80] [fffffffffffffee0] 0xfffffffffffffee0 [c00000025fc3fcd0] [c000000000501e70] event_function+0xa8/0x120 <snip> Kernel panic - not syncing: Aiee, killing interrupt handler!
Fix this by adding the module ownership to 'vpa_pmu' so that the module 'vpa_pmu' is ref-counted and prevented from being unloaded when perf-events are initialized.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-default-livepatch | Dec 5, 2025 | Jun 13, 2025 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-azure | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub