Linux Kernel Vulnerability in Event Context Management

CVE-2025-37878

Summary

A vulnerability exists in the Linux kernel related to performance monitoring events, specifically in the handling of event context initialization. Improper assignment of the child event context prior to its validation can result in unexpected behavior during cleanup operations. This issue arose from a complex interaction of multiple code changes over many years. The solution involves adjusting the sequence of context assignment to ensure that it is performed immediately after the event's initial validation, preventing the potential triggering of warnings related to the event context's state when accessed later in the code.

References