CVE-2025-39990
Published: October 17, 2025Last modified: October 17, 2025
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in get_helper_proto kernel test robot reported verifier bug [1] where the helper func pointer could be NULL due to disabled config option. As Alexei suggested we could check on that in get_helper_proto directly. Marking tail_call helper func with BPF_PTR_POISON, because it is unused by design. [1] https://lore.kernel.org/oe-lkp/[email protected]
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Vulnerable (6.1.155-r0) |
| 25 LTS | linux-lts | Fixed (6.12.51-r0) | |
| Stream | linux-lts | Fixed (6.12.51-r0) |