In the Linux kernel, the following vulnerability has been resolved:
perf/core: Handle buffer mapping fail correctly in perf_mmap()
After successful allocation of a buffer or a successful attachment to an existing buffer perf_mmap() tries to map the buffer read only into the page table. If that fails, the already set up page table entries are zapped, but the other perf specific side effects of that failure are not handled. The calling code just cleans up the VMA and does not invoke perf_mmap_close().
This leaks reference counts, corrupts user->vm accounting and also results in an unbalanced invocation of event::event_mapped().
Cure this by moving the event::event_mapped() invocation before the map_range() call so that on map_range() failure perf_mmap_close() can be invoked without causing an unbalanced event::event_unmapped() call.
perf_mmap_close() undoes the reference counts and eventually frees buffers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade kernel-symsUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade dtb-lgUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade dtb-armUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade kernel-default-optional | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub