---
id: CVE-2025-38489
title: 's390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again

  Commit 7ded842b356d ("s390/bpf: Fix bpf_plt pointer arithmetic") has
  accidentally removed the critical p…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c3062bdb859b6e2567e7f5c8cde20c0250bb130f <
    0c7b20f7785cfdd59403333612c90b458b12307c
  - >-
    Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb <
    d5629d1af0600f8cc7c9245e8d832a66358ef889
  - >-
    Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb <
    a4f9c7846b1ac428921ce9676b1b8c80ed60093c
  - >-
    Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb <
    6a5abf8cf182f577c7ae6c62f14debc9754ec986
  - Linux d3d74e45a060d218fe4b0c9174f0a77517509d8e
  - Linux >= 6.6.26 < 6.6.100
  - Linux >= 6.8.5 < 6.9
  - Linux 6.9
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:57:30.614527Z'
published: '2025-07-28'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:02:40.065Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38489'
references:
  - url: 'https://git.kernel.org/stable/c/0c7b20f7785cfdd59403333612c90b458b12307c'
  - url: 'https://git.kernel.org/stable/c/d5629d1af0600f8cc7c9245e8d832a66358ef889'
  - url: 'https://git.kernel.org/stable/c/a4f9c7846b1ac428921ce9676b1b8c80ed60093c'
  - url: 'https://git.kernel.org/stable/c/6a5abf8cf182f577c7ae6c62f14debc9754ec986'
tags:
  - cve.org
epss: 0.00167
epssPercentile: 0.05989
ingestedAt: '2026-11-05T22:38:31.974Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again

Commit 7ded842b356d ("s390/bpf: Fix bpf_plt pointer arithmetic") has
accidentally removed the critical piece of commit c730fce7c70c
("s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL"), causing
intermittent kernel panics in e.g. perf's on_switch() prog to reappear.

Restore the fix and add a comment.

## Affected

- `Linux >= c3062bdb859b6e2567e7f5c8cde20c0250bb130f < 0c7b20f7785cfdd59403333612c90b458b12307c`
- `Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb < d5629d1af0600f8cc7c9245e8d832a66358ef889`
- `Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb < a4f9c7846b1ac428921ce9676b1b8c80ed60093c`
- `Linux >= 7ded842b356d151ece8ac4985940438e6d3998bb < 6a5abf8cf182f577c7ae6c62f14debc9754ec986`
- `Linux d3d74e45a060d218fe4b0c9174f0a77517509d8e`
- `Linux >= 6.6.26 < 6.6.100`
- `Linux >= 6.8.5 < 6.9`
- `Linux 6.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.