In the Linux kernel, the following vulnerability has been resolved:
perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
Currently, using PEBS-via-PT with a sample frequency instead of a sample period, causes a segfault. For example:
BUG: kernel NULL pointer dereference, address: 0000000000000195 <NMI> ? __die_body.cold+0x19/0x27 ? page_fault_oops+0xca/0x290 ? exc_page_fault+0x7e/0x1b0 ? asm_exc_page_fault+0x26/0x30 ? intel_pmu_pebs_event_update_no_drain+0x40/0x60 ? intel_pmu_pebs_event_update_no_drain+0x32/0x60 intel_pmu_drain_pebs_icl+0x333/0x350 handle_pmi_common+0x272/0x3c0 intel_pmu_handle_irq+0x10a/0x2e0 perf_event_nmi_handler+0x2a/0x50
That happens because intel_pmu_pebs_event_update_no_drain() assumes all the pebs_enabled bits represent counter indexes, which is not always the case. In this particular case, bits 60 and 61 are set for PEBS-via-PT purposes.
The behaviour of PEBS-via-PT with sample frequency is questionable because although a PMI is generated (PEBS_PMI_AFTER_EACH_RECORD), the period is not adjusted anyway.
Putting that aside, fix intel_pmu_pebs_event_update_no_drain() by passing the mask of counter bits instead of 'size'. Note, prior to the Fixes commit, 'size' would be limited to the maximum counter index, so the issue was not hit.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel-develUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.12.31-35.92 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-azure-extra | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidiaUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-gcp-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-realtime-6.14Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04 | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub