In the Linux kernel, the following vulnerability has been resolved:
powerpc64/ftrace: fix clobbered r15 during livepatching
While r15 is clobbered always with PPC_FTRACE_OUT_OF_LINE, it is not restored in livepatch sequence leading to not so obvious fails like below:
BUG: Unable to handle kernel data access on write at 0xc0000000000f9078 Faulting instruction address: 0xc0000000018ff958 Oops: Kernel access of bad area, sig: 11 [#1] ... NIP: c0000000018ff958 LR: c0000000018ff930 CTR: c0000000009c0790 REGS: c00000005f2e7790 TRAP: 0300 Tainted: G K (6.14.0+) MSR: 8000000000009033 <SF,EE,ME,IR,DR,RI,LE> CR: 2822880b XER: 20040000 CFAR: c0000000008addc0 DAR: c0000000000f9078 DSISR: 0a000000 IRQMASK: 1 GPR00: c0000000018f2584 c00000005f2e7a30 c00000000280a900 c000000017ffa488 GPR04: 0000000000000008 0000000000000000 c0000000018f24fc 000000000000000d GPR08: fffffffffffe0000 000000000000000d 0000000000000000 0000000000008000 GPR12: c0000000009c0790 c000000017ffa480 c00000005f2e7c78 c0000000000f9070 GPR16: c00000005f2e7c90 0000000000000000 0000000000000000 0000000000000000 GPR20: 0000000000000000 c00000005f3efa80 c00000005f2e7c60 c00000005f2e7c88 GPR24: c00000005f2e7c60 0000000000000001 c0000000000f9078 0000000000000000 GPR28: 00007fff97960000 c000000017ffa480 0000000000000000 c0000000000f9078 ... Call Trace: check_heap_object+0x34/0x390 (unreliable) __mutex_unlock_slowpath.isra.0+0xe4/0x230 seq_read_iter+0x430/0xa90 proc_reg_read_iter+0xa4/0x200 vfs_read+0x41c/0x510 ksys_read+0xa4/0x190 system_call_exception+0x1d0/0x440 system_call_vectored_common+0x15c/0x2ec
Fix it by restoring r15 always.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-defaultUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-rt-vdso | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-realtimeUpgrade linux-image-genericUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-azureUpgrade linux-image-oem-24.04cUpgrade linux-image-raspiUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-aws-6.14 | Jul 9, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub