In the Linux kernel, the following vulnerability has been resolved:
perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
Currently, using PEBS-via-PT with a sample frequency instead of a sample period, causes a segfault. For example:
BUG: kernel NULL pointer dereference, address: 0000000000000195 <NMI> ? __die_body.cold+0x19/0x27 ? page_fault_oops+0xca/0x290 ? exc_page_fault+0x7e/0x1b0 ? asm_exc_page_fault+0x26/0x30 ? intel_pmu_pebs_event_update_no_drain+0x40/0x60 ? intel_pmu_pebs_event_update_no_drain+0x32/0x60 intel_pmu_drain_pebs_icl+0x333/0x350 handle_pmi_common+0x272/0x3c0 intel_pmu_handle_irq+0x10a/0x2e0 perf_event_nmi_handler+0x2a/0x50
That happens because intel_pmu_pebs_event_update_no_drain() assumes all the pebs_enabled bits represent counter indexes, which is not always the case. In this particular case, bits 60 and 61 are set for PEBS-via-PT purposes.
The behaviour of PEBS-via-PT with sample frequency is questionable because although a PMI is generated (PEBS_PMI_AFTER_EACH_RECORD), the period is not adjusted anyway.
Putting that aside, fix intel_pmu_pebs_event_update_no_drain() by passing the mask of counter bits instead of 'size'. Note, prior to the Fixes commit, 'size' would be limited to the maximum counter index, so the issue was not hit.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade python3-perf6.12-debuginfoUpgrade python3-perf6.12Upgrade bpftoolUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel6.12Upgrade perf6.12Upgrade kernel-livepatch-6.12.31-35.92Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel6.12-modules-extra | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-azure-devel | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gkeopUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidiaUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-aws-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-ibmUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-kvmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azureUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64k-6.14 | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub