In the Linux kernel, the following vulnerability has been resolved:
powerpc64/ftrace: fix module loading without patchable function entries
get_stubs_size assumes that there must always be at least one patchable function entry, which is not always the case (modules that export data but no code), otherwise it returns -ENOEXEC and thus the section header sh_size is set to that value. During module_memory_alloc() the size is passed to execmem_alloc() after being page-aligned and thus set to zero which will cause it to fail the allocation (and thus module loading) as __vmalloc_node_range() checks for zero-sized allocs and returns null:
[ 115.466896] module_64: cast_common: doesn't contain __patchable_function_entries. [ 115.469189] ------------[ cut here ]------------ [ 115.469496] WARNING: CPU: 0 PID: 274 at mm/vmalloc.c:3778 __vmalloc_node_range_noprof+0x8b4/0x8f0 ... [ 115.478574] ---[ end trace 0000000000000000 ]--- [ 115.479545] execmem: unable to allocate memory
Fix this by removing the check completely, since it is anyway not helpful to propagate this as an error upwards.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade kernel-azure | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1009-awsUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-azureUpgrade linux-image-oem-24.04cUpgrade linux-image-realtime-6.14Upgrade linux-image-realtimeUpgrade linux-image-aws-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1010-azureUpgrade linux-image-virtual-6.14Upgrade linux-image-aws-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04 | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub