Linux Kernel PowerPC64 Ftrace Module Loading Vulnerability

Vulnerability

A vulnerability in the Linux kernel's PowerPC64 ftrace module loading process has been identified. The issue arises because the 'get_stubs_size' function incorrectly assumes that there will always be at least one patchable function entry in a module. This assumption fails for modules that export data but no code, leading the function to return an error that causes the module loading process to fail. The problem manifests as a warning during the module loading process, indicating that the module does not contain the expected patchable function entries. This warning is part of a larger trace that shows the memory allocation failure caused by the zero-sized allocation being rejected.

Impact

The vulnerability causes a denial of service by failing to load certain modules, which can disrupt the functionality that relies on those modules.

Remediation

The vulnerability has been fixed in the official Linux Git repository. Users should upgrade to the latest version of the Linux kernel.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.