In the Linux kernel, the following vulnerability has been resolved:
coresight: holding cscfg_csdev_lock while removing cscfg from csdev
There'll be possible race scenario for coresight config:
CPU0 CPU1 (perf enable) load module cscfg_load_config_sets() activate config. // sysfs (sys_active_cnt == 1) ... cscfg_csdev_enable_active_config() lock(csdev->cscfg_csdev_lock) deactivate config // sysfs (sys_activec_cnt == 0) cscfg_unload_config_sets() <iterating config_csdev_list> cscfg_remove_owned_csdev_configs() // here load config activate by CPU1 unlock(csdev->cscfg_csdev_lock)
iterating config_csdev_list could be raced with config_csdev_list's entry delete.
To resolve this race , hold csdev->cscfg_csdev_lock() while cscfg_remove_owned_csdev_configs()
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | Jul 4, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade dtb-broadcomUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kernel-develUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade dtb-armUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-azure-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azureUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-hwe-24.04 | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub