CVE-2025-38424
- Source
- https://cve.org/CVERecord?id=CVE-2025-38424
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38424.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38424
- Downstream
- Related
- Published
- 2025-07-25T14:16:44.846Z
- Modified
- 2026-03-20T12:42:51.165472Z
- Summary
- perf: Fix sample vs do_exit()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
perf: Fix sample vs do_exit()
Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to trying to access MMIO in bad ways.
The crash further shows perf trying to do a user stack sample while in exitmmap()'s tlbfinish_mmu() -- i.e. while tearing down the address space it is trying to access.
It turns out that we stop perf after we tear down the userspace mm; a receipie for disaster, since perf likes to access userspace for various reasons.
Flip this order by moving up where we stop perf in do_exit().
Additionally, harden PERFSAMPLECALLCHAIN and PERFSAMPLESTACKUSER to abort when the current task does not have an mm (exitmm() makes sure to set current->mm = NULL; before commencing with the actual teardown). Such that CPU wide events don't trip on this same problem.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38424.json" }- References
-
- https://git.kernel.org/stable/c/2ee6044a693735396bb47eeaba1ac3ae26c1c99b
- https://git.kernel.org/stable/c/456019adaa2f5366b89c868dea9b483179bece54
- https://git.kernel.org/stable/c/4f6fc782128355931527cefe3eb45338abd8ab39
- https://git.kernel.org/stable/c/507c9a595bad3abd107c6a8857d7fd125d89f386
- https://git.kernel.org/stable/c/7311970d07c4606362081250da95f2c7901fc0db
- https://git.kernel.org/stable/c/7b8f3c72175c6a63a95cf2e219f8b78e2baad34e
- https://git.kernel.org/stable/c/975ffddfa2e19823c719459d2364fcaa17673964
- https://git.kernel.org/stable/c/a9f6aab7910a0ef2895797f15c947f6d1053160f
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38424.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-38424
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc5ebcedb566ef17bda7b02686e0d658a7bb42ee7Fixed7b8f3c72175c6a63a95cf2e219f8b78e2baad34eFixed507c9a595bad3abd107c6a8857d7fd125d89f386Fixeda9f6aab7910a0ef2895797f15c947f6d1053160fFixed975ffddfa2e19823c719459d2364fcaa17673964Fixed2ee6044a693735396bb47eeaba1ac3ae26c1c99bFixed456019adaa2f5366b89c868dea9b483179bece54Fixed7311970d07c4606362081250da95f2c7901fc0dbFixed4f6fc782128355931527cefe3eb45338abd8ab39