CVE-2025-21869

A flaw was found in the Linux kernel's code-patching mechanism for PowerPC systems. When the kernel applies code patches, a temporary memory management unit (MMU) is used, but the Kernel Address Sanitizer (KASAN) reports are not disabled. This allows a critical function to write data into a user-accessible memory area instead of secure kernel memory. A local attacker with low privileges could exploit this vulnerability to corrupt memory, which may lead to system instability, unauthorized information access, or the execution of malicious code.

A Moderate flaw was found in the Linux kernel's PowerPC code patching. An attacker with high privileges could exploit this vulnerability to cause a denial of service or potentially achieve local privilege escalation. This occurs due to incorrect KASAN report suppression during temporary memory mapping, affecting systems running on PowerPC architecture.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.