In the Linux kernel, the following vulnerability has been resolved:
powerpc64/ftrace: fix clobbered r15 during livepatching
While r15 is clobbered always with PPC_FTRACE_OUT_OF_LINE, it is not restored in livepatch sequence leading to not so obvious fails like below:
BUG: Unable to handle kernel data access on write at 0xc0000000000f9078 Faulting instruction address: 0xc0000000018ff958 Oops: Kernel access of bad area, sig: 11 [#1] ... NIP: c0000000018ff958 LR: c0000000018ff930 CTR: c0000000009c0790 REGS: c00000005f2e7790 TRAP: 0300 Tainted: G K (6.14.0+) MSR: 8000000000009033 <SF,EE,ME,IR,DR,RI,LE> CR: 2822880b XER: 20040000 CFAR: c0000000008addc0 DAR: c0000000000f9078 DSISR: 0a000000 IRQMASK: 1 GPR00: c0000000018f2584 c00000005f2e7a30 c00000000280a900 c000000017ffa488 GPR04: 0000000000000008 0000000000000000 c0000000018f24fc 000000000000000d GPR08: fffffffffffe0000 000000000000000d 0000000000000000 0000000000008000 GPR12: c0000000009c0790 c000000017ffa480 c00000005f2e7c78 c0000000000f9070 GPR16: c00000005f2e7c90 0000000000000000 0000000000000000 0000000000000000 GPR20: 0000000000000000 c00000005f3efa80 c00000005f2e7c60 c00000005f2e7c88 GPR24: c00000005f2e7c60 0000000000000001 c0000000000f9078 0000000000000000 GPR28: 00007fff97960000 c000000017ffa480 0000000000000000 c0000000000f9078 ... Call Trace: check_heap_object+0x34/0x390 (unreliable) __mutex_unlock_slowpath.isra.0+0xe4/0x230 seq_read_iter+0x430/0xa90 proc_reg_read_iter+0xa4/0x200 vfs_read+0x41c/0x510 ksys_read+0xa4/0x190 system_call_exception+0x1d0/0x440 system_call_vectored_common+0x15c/0x2ec
Fix it by restoring r15 always.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-devel | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-6.14Upgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-azure-6.14Upgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-raspiUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-azureUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-raspi-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04 | Jul 9, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub