CVE-2025-40359: perf/x86/intel: Fix KASAN global-out-of-bounds warning
In the Linux kernel, the following vulnerability has been resolved:
perf/x86/intel: Fix KASAN global-out-of-bounds warning
When running "perf mem record" command on CWF, the below KASAN global-out-of-bounds warning is seen.
================================================================== BUG: KASAN: global-out-of-bounds in cmtlatencydata+0x176/0x1b0 Read of size 4 at addr ffffffffb721d000 by task dtlb/9850
Call Trace:
kasanreport+0xb8/0xf0 cmtlatencydata+0x176/0x1b0 setuparchpebssampledata+0xf49/0x2560 intelpmudrainarchpebs+0x577/0xb00 handlepmicommon+0x6c4/0xc80
The issue is caused by below code in grtlatencydata(). The code tries to access x86hybridpmu structure which doesn't exist on non-hybrid platform like CWF.
WARNONONCE(hybridpmu(event->pmu)->pmutype == hybridbig)
So add ishybrid() check before calling this WARNONONCE to fix the global-out-of-bounds access issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40359?
CVE-2025-40359 is classified as a low-severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-40359?
To fix CVE-2025-40359, you should upgrade to the latest patched version of the Linux kernel.
What kind of issue does CVE-2025-40359 address?
CVE-2025-40359 addresses a global-out-of-bounds warning encountered when using the "perf mem record" command.
Which versions of the Linux kernel are affected by CVE-2025-40359?
CVE-2025-40359 affects multiple versions of the Linux kernel prior to the fix.
Are there any known exploits for CVE-2025-40359?
As of now, there are no publicly known exploits for CVE-2025-40359.