AZL-70162
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-70162.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-70162
- Upstream
- Published
- 2025-05-09T07:16:09Z
- Modified
- 2026-04-01T05:21:42.083273Z
- Summary
- CVE-2025-37884 affecting package kernel 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix deadlock between rcutaskstrace and event_mutex.
Fix the following deadlock: CPU A freeevent() perfkprobedestroy() mutexlock(&eventmutex) perftraceeventunreg() synchronizercutaskstrace()
There are several paths where freeevent() grabs eventmutex and calls syncrcutaskstrace. Above is one such case.
CPU B bpfprogtestrunsyscall() rcureadlocktrace() bpfprogrunpinoncpu() bpfprogload() bpftracingfuncproto() tracesetclrevent() mutexlock(&eventmutex)
Delegate tracesetclr_event() to workqueue to avoid such lock dependency.
- References