In the Linux kernel, the following vulnerability has been resolved:
coresight: holding cscfg_csdev_lock while removing cscfg from csdev
There'll be possible race scenario for coresight config:
CPU0 CPU1 (perf enable) load module cscfg_load_config_sets() activate config. // sysfs (sys_active_cnt == 1) ... cscfg_csdev_enable_active_config() lock(csdev->cscfg_csdev_lock) deactivate config // sysfs (sys_activec_cnt == 0) cscfg_unload_config_sets() <iterating config_csdev_list> cscfg_remove_owned_csdev_configs() // here load config activate by CPU1 unlock(csdev->cscfg_csdev_lock)
iterating config_csdev_list could be raced with config_csdev_list's entry delete.
To resolve this race , hold csdev->cscfg_csdev_lock() while cscfg_remove_owned_csdev_configs()
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | Jul 4, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-marvell | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-virtual | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub