In the Linux kernel, the following vulnerability has been resolved:
arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight
An infinite loop has been created by the Coresight devices. When only a source device is enabled, the coresight_find_activated_sysfs_sink function is recursively invoked in an attempt to locate an active sink device, ultimately leading to a stack overflow and system crash. Therefore, disable the replicator1 to break the infinite loop and prevent a potential stack overflow.
replicator1_out -> funnel_swao_in6 -> tmc_etf_swao_in -> tmc_etf_swao_out | | replicator1_in replicator_swao_in | | replicator0_out1 replicator_swao_out0 | | replicator0_in funnel_in1_in3 | | tmc_etf_out <- tmc_etf_in <- funnel_merg_out <- funnel_merg_in1 <- funnel_in1_out
[call trace] dump_backtrace+0x9c/0x128 show_stack+0x20/0x38 dump_stack_lvl+0x48/0x60 dump_stack+0x18/0x28 panic+0x340/0x3b0 nmi_panic+0x94/0xa0 panic_bad_stack+0x114/0x138 handle_bad_stack+0x34/0xb8 __bad_stack+0x78/0x80 coresight_find_activated_sysfs_sink+0x28/0xa0 [coresight] coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight] coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight] coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight] coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight] ... coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight] coresight_enable_sysfs+0x80/0x2a0 [coresight]
side effect after the change: Only trace data originating from AOSS can reach the ETF_SWAO and EUD sinks.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-genericUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-azureUpgrade linux-image-6.14.0-1017-oracle | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub