CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev
In the Linux kernel, the following vulnerability has been resolved:
coresight: holding cscfgcsdevlock while removing cscfg from csdev
There'll be possible race scenario for coresight config:
CPU0 CPU1 (perf enable) load module cscfgloadconfigsets() activate config. // sysfs (sysactivecnt == 1) ... cscfgcsdevenableactiveconfig() lock(csdev->cscfgcsdevlock) deactivate config // sysfs (sysactiveccnt == 0) cscfgunloadconfigsets() <iterating configcsdevlist> cscfgremoveownedcsdevconfigs() // here load config activate by CPU1 unlock(csdev->cscfgcsdevlock)
iterating configcsdevlist could be raced with configcsdevlist's entry delete.
To resolve this race , hold csdev->cscfgcsdevlock() while cscfgremoveownedcsdevconfigs()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-aws-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1013.13~24.04.1 - Upgrade
Upgrade
ubuntu/linux-azure-nvidia-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-gcp-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1016.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-oem-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1012.12 - Upgrade
Upgrade
ubuntu/linux-oracle-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1013.13~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-32.32.1~24.04.1 - Upgrade
Upgrade
ubuntu/linux-realtime-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1012.12~24.04.1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.114 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.15.3 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.16.3-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.12-1Fixed in 7.2.14-1 - Compensating control
Hold csdev->cscfg_csdev_lock while cscfg_remove_owned_csdev_configs() removes entries from config_csdev_list, including during cscfg_unload_config_sets(), and release the lock afterward to prevent concurrent iteration and deletion races.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38132?
The severity of CVE-2025-38132 has been classified as medium due to the potential for race conditions affecting the coresight configuration.
How do I fix CVE-2025-38132?
To fix CVE-2025-38132, upgrade to the latest version of the Linux kernel where this vulnerability has been patched.
Which systems are affected by CVE-2025-38132?
CVE-2025-38132 affects the Linux kernel across various versions that implement coresight functionality.
What are the symptoms of CVE-2025-38132 exploitation?
Exploitation of CVE-2025-38132 may lead to unexpected behavior in coresight configurations and potential system instability.
Is there a workaround for CVE-2025-38132?
Currently, there are no recommended workarounds for CVE-2025-38132 other than applying the security patch.