{"id":"CVE-2025-38489","title":"s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again\n\nCommit 7ded842b356d (\"s390/bpf: Fix bpf_plt pointer arithmetic\") has\naccidentally removed the critical p…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= c3062bdb859b6e2567e7f5c8cde20c0250bb130f < 0c7b20f7785cfdd59403333612c90b458b12307c","Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb < d5629d1af0600f8cc7c9245e8d832a66358ef889","Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb < a4f9c7846b1ac428921ce9676b1b8c80ed60093c","Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb < 6a5abf8cf182f577c7ae6c62f14debc9754ec986","Linux d3d74e45a060d218fe4b0c9174f0a77517509d8e","Linux >= 6.6.26 < 6.6.100","Linux >= 6.8.5 < 6.9","Linux 6.9"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:57:30.614527Z"},"published":"2025-07-28","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:02:40.065Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38489","references":[{"url":"https://git.kernel.org/stable/c/0c7b20f7785cfdd59403333612c90b458b12307c"},{"url":"https://git.kernel.org/stable/c/d5629d1af0600f8cc7c9245e8d832a66358ef889"},{"url":"https://git.kernel.org/stable/c/a4f9c7846b1ac428921ce9676b1b8c80ed60093c"},{"url":"https://git.kernel.org/stable/c/6a5abf8cf182f577c7ae6c62f14debc9754ec986"}],"tags":["cve.org"],"epss":0.00167,"epssPercentile":0.05989,"ingestedAt":"2026-11-05T22:38:31.974Z","slug":"CVE-2025-38489","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ns390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again\n\nCommit 7ded842b356d (\"s390/bpf: Fix bpf_plt pointer arithmetic\") has\naccidentally removed the critical piece of commit c730fce7c70c\n(\"s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL\"), causing\nintermittent kernel panics in e.g. perf's on_switch() prog to reappear.\n\nRestore the fix and add a comment.\n\n## Affected\n\n- `Linux >= c3062bdb859b6e2567e7f5c8cde20c0250bb130f < 0c7b20f7785cfdd59403333612c90b458b12307c`\n- `Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb < d5629d1af0600f8cc7c9245e8d832a66358ef889`\n- `Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb < a4f9c7846b1ac428921ce9676b1b8c80ed60093c`\n- `Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb < 6a5abf8cf182f577c7ae6c62f14debc9754ec986`\n- `Linux d3d74e45a060d218fe4b0c9174f0a77517509d8e`\n- `Linux >= 6.6.26 < 6.6.100`\n- `Linux >= 6.8.5 < 6.9`\n- `Linux 6.9`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}