The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
perf: Fix sample vs do_exit()
Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to trying to access MMIO in bad ways.
The crash further shows perf trying to do a user stack sample while in exitmmap()'s tlbfinish_mmu() -- i.e. while tearing down the address space it is trying to access.
It turns out that we stop perf after we tear down the userspace mm; a receipie for disaster, since perf likes to access userspace for various reasons.
Flip this order by moving up where we stop perf in do_exit().
Additionally, harden PERFSAMPLECALLCHAIN and PERFSAMPLESTACKUSER to abort when the current task does not have an mm (exitmm() makes sure to set current->mm = NULL; before commencing with the actual teardown). Such that CPU wide events don't trip on this same problem.(CVE-2025-38424)
{ "severity": "High" }
{ "aarch64": [ "bpftool-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "bpftool-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "kernel-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "kernel-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "kernel-debugsource-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "kernel-devel-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "kernel-source-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "kernel-tools-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "kernel-tools-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "kernel-tools-devel-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "perf-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "perf-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "python2-perf-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "python2-perf-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "python3-perf-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm", "python3-perf-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.aarch64.rpm" ], "x86_64": [ "bpftool-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "bpftool-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "kernel-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "kernel-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "kernel-debugsource-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "kernel-devel-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "kernel-source-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "kernel-tools-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "kernel-tools-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "kernel-tools-devel-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "perf-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "perf-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "python2-perf-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "python2-perf-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "python3-perf-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm", "python3-perf-debuginfo-4.19.90-2507.5.0.0338.oe2003sp4.x86_64.rpm" ], "src": [ "kernel-4.19.90-2507.5.0.0338.oe2003sp4.src.rpm" ] }