cbcvebase.
CVE-2025-38131
published 2025-07-03

CVE-2025-38131: In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While enable active…

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While enable active config via cscfg_csdev_enable_active_config(), active config could be deactivated via configfs' sysfs interface. This could make UAF issue in below scenario: CPU0 CPU1 (sysfs enable) load module cscfg_load_config_sets() activate config. // sysfs (sys_active_cnt == 1) ... cscfg_csdev_enable_active_config() lock(csdev->cscfg_csdev_lock) // here load config activate by CPU1 unlock(csdev->cscfg_csdev_lock) deactivate config // sysfs (sys_activec_cnt == 0) cscfg_unload_config_sets() unload module // access to config_desc which freed // while unloading module. cscfg_csdev_enable_config To address this, use cscfg_config_desc's active_cnt as a reference count which will be holded when - activate the config. - enable the activated config. and put the module reference when config_active_cnt == 0.

Affected

28 ranges· showing 25
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 6.1.147-1 (bookworm)linux 6.1.147-1 (bookworm)
debianlinux-6.1< linux 6.1.147-1 (bookworm)linux 6.1.147-1 (bookworm)
linuxlinux
linuxlinux>= f8cce2ff3c04361b8843d8489620fda8880f668b < dfe8224c9c7a43d356eb9f74b06868aa05f90223dfe8224c9c7a43d356eb9f74b06868aa05f90223
linuxlinux>= f8cce2ff3c04361b8843d8489620fda8880f668b < b3b4efa2e623aecaebd7c9b9e4171f5c659e9724b3b4efa2e623aecaebd7c9b9e4171f5c659e9724
linuxlinux>= f8cce2ff3c04361b8843d8489620fda8880f668b < 31028812724cef7bd57a51525ce58a32a6d73b2231028812724cef7bd57a51525ce58a32a6d73b22
linuxlinux>= f8cce2ff3c04361b8843d8489620fda8880f668b < ed42ee1ed05ff2f4c36938379057413a40c56680ed42ee1ed05ff2f4c36938379057413a40c56680
linuxlinux>= f8cce2ff3c04361b8843d8489620fda8880f668b < 408c97c4a5e0b634dcd15bf8b8808b382e888164408c97c4a5e0b634dcd15bf8b8808b382e888164
linuxlinux_kernel>= 0 < 6.1.147-16.1.147-1
linuxlinux_kernel>= 0 < 6.12.35-16.12.35-1
linuxlinux_kernel>= 0 < 6.12.35-16.12.35-1
linuxlinux_kernel>= 0 < 6.8.0-100.1006.8.0-100.100
linuxlinux_kernel>= 5.15 < 6.1.1426.1.142
linuxlinux_kernel>= 6.13 < 6.15.36.15.3
linuxlinux_kernel>= 6.2 < 6.6.946.6.94
linuxlinux_kernel>= 6.7 < 6.12.346.12.34
msrcazl3_kernel_6.6.92.2-2_on_azure_linux_3.0
msrccbl2_kernel_5.15.186.1-1_on_cbl_mariner_2.0
ubuntulinux-aws
ubuntulinux-aws-6.8
ubuntulinux-gkeop
ubuntulinux-nvidia
ubuntulinux-nvidia-6.8
ubuntulinux-oracle

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH