In the Linux kernel, the following vulnerability has been resolved:
perf/core: Add RCU read lock protection to perf_iterate_ctx()
The perf_iterate_ctx() function performs RCU list traversal but currently lacks RCU read lock protection. This causes lockdep warnings when running perf probe with unshare(1) under CONFIG_PROVE_RCU_LIST=y:
WARNING: suspicious RCU usage kernel/events/core.c:8168 RCU-list traversed in non-reader section!!
Call Trace: lockdep_rcu_suspicious ? perf_event_addr_filters_apply perf_iterate_ctx perf_event_exec begin_new_exec ? load_elf_phdrs load_elf_binary ? lock_acquire ? find_held_lock ? bprm_execve bprm_execve do_execveat_common.isra.0 __x64_sys_execve do_syscall_64 entry_SYSCALL_64_after_hwframe
This protection was previously present but was removed in commit bd2756811766 ("perf: Rewrite core context handling"). Add back the necessary rcu_read_lock()/rcu_read_unlock() pair around perf_iterate_ctx() call in perf_event_exec().
[ mingo: Use scoped_guard() as suggested by Peter ]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dtb-caviumUpgrade dlm-kmp-64kb | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-gkeUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-aws-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gke-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-genericUpgrade linux-image-generic-hwe-22.04 | May 21, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub