Race Condition in Linux Kernel Coresight Configuration Affecting CPU Performance

CVE-2025-38132

What is CVE-2025-38132?

A race condition vulnerability has been identified in the Linux kernel's coresight configuration, which may lead to inconsistent system behavior during performance monitoring. This issue arises from improper locking mechanisms, allowing multiple CPUs to interact with the configuration simultaneously. Specifically, while one CPU activates a configuration, another may attempt to deactivate it, leading to unpredictable states and potential system instability. A resolution has been implemented to ensure that the configuration lock is maintained during critical operations, thereby enhancing the reliability and performance of CPU-related tasks.

References