In the Linux kernel, the following vulnerability has been resolved:
powerpc64/ftrace: fix clobbered r15 during livepatching
While r15 is clobbered always with PPC_FTRACE_OUT_OF_LINE, it is not restored in livepatch sequence leading to not so obvious fails like below:
BUG: Unable to handle kernel data access on write at 0xc0000000000f9078 Faulting instruction address: 0xc0000000018ff958 Oops: Kernel access of bad area, sig: 11 [#1] ... NIP: c0000000018ff958 LR: c0000000018ff930 CTR: c0000000009c0790 REGS: c00000005f2e7790 TRAP: 0300 Tainted: G K (6.14.0+) MSR: 8000000000009033 <SF,EE,ME,IR,DR,RI,LE> CR: 2822880b XER: 20040000 CFAR: c0000000008addc0 DAR: c0000000000f9078 DSISR: 0a000000 IRQMASK: 1 GPR00: c0000000018f2584 c00000005f2e7a30 c00000000280a900 c000000017ffa488 GPR04: 0000000000000008 0000000000000000 c0000000018f24fc 000000000000000d GPR08: fffffffffffe0000 000000000000000d 0000000000000000 0000000000008000 GPR12: c0000000009c0790 c000000017ffa480 c00000005f2e7c78 c0000000000f9070 GPR16: c00000005f2e7c90 0000000000000000 0000000000000000 0000000000000000 GPR20: 0000000000000000 c00000005f3efa80 c00000005f2e7c60 c00000005f2e7c88 GPR24: c00000005f2e7c60 0000000000000001 c0000000000f9078 0000000000000000 GPR28: 00007fff97960000 c000000017ffa480 0000000000000000 c0000000000f9078 ... Call Trace: check_heap_object+0x34/0x390 (unreliable) __mutex_unlock_slowpath.isra.0+0xe4/0x230 seq_read_iter+0x430/0xa90 proc_reg_read_iter+0xa4/0x200 vfs_read+0x41c/0x510 ksys_read+0xa4/0x190 system_call_exception+0x1d0/0x440 system_call_vectored_common+0x15c/0x2ec
Fix it by restoring r15 always.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-develUpgrade dtb-amlogicUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-rt | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-raspiUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-awsUpgrade linux-image-aws-6.14Upgrade linux-image-azureUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-azure-6.14 | Jul 9, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub