In the Linux kernel, the following vulnerability has been resolved:
coresight: holding cscfg_csdev_lock while removing cscfg from csdev
There'll be possible race scenario for coresight config:
CPU0 CPU1 (perf enable) load module cscfg_load_config_sets() activate config. // sysfs (sys_active_cnt == 1) ... cscfg_csdev_enable_active_config() lock(csdev->cscfg_csdev_lock) deactivate config // sysfs (sys_activec_cnt == 0) cscfg_unload_config_sets() <iterating config_csdev_list> cscfg_remove_owned_csdev_configs() // here load config activate by CPU1 unlock(csdev->cscfg_csdev_lock)
iterating config_csdev_list could be raced with config_csdev_list's entry delete.
To resolve this race , hold csdev->cscfg_csdev_lock() while cscfg_remove_owned_csdev_configs()
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | Jul 4, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade kernel-default-develUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade dtb-apmUpgrade dtb-amazonUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade dtb-armUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-obs-build | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-azureUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1012-azure | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub