Threats tagged 'ghsa-p4mq-5hwr-hc6r'

CVE-2025-21866 is a medium severity vulnerability in the Linux kernel affecting the PowerPC code patching infrastructure. It involves a Kernel Address Sanitizer (KASAN) out-of-bounds memory access triggered by incorrectly flagging a text patching area as VM_ALLOC, which causes the kernel to treat the memory as uninitialized and leads to a crash. The issue was observed on PowerMac G4 systems running a KASAN-enabled kernel. The root cause is that the text patching area is not vmalloc memory but was flagged as such, causing improper memory poisoning. The fix involves not flagging this area as VM_ALLOC so it is usable immediately without causing KASAN errors.