CVE-2025-38132 coresight: holding cscfg_csdev_lock while removing cscfg from csdev
A race condition in the Linux kernel Coresight driver allows concurrent access to configuration lists, potentially causing system instability or crashes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-38132?
CVE-2025-38132 is a medium-severity vulnerability in Linux kernel, published on 3 Jul 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
coresight: holding cscfg_csdev_lock while removing cscfg from csdev
There'll be possible race scenario for coresight config:
CPU0 CPU1 (perf enable) load module cscfg_load_config_sets() activate config. // sysfs (sys_active_cnt == 1) ... cscfg_csdev_enable_active_config() lock(csdev->cscfg_csdev_lock) deactivate config // sysfs (sys_activec_cnt == 0) cscfg_unload_config_sets() <iterating config_csdev_list> cscfg_remove_owned_csdev_configs() // here load config activate by CPU1 unlock(csdev->cscfg_csdev_lock)
iterating config_csdev_list could be raced with config_csdev_list's entry delete.
To resolve this race , hold csdev->cscfg_csdev_lock() while cscfg_remove_owned_csdev_configs()
Which versions are affected by CVE-2025-38132?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-38132?
Apply the vendor's patch.
Is CVE-2025-38132 being exploited?
There is no known exploitation of CVE-2025-38132 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-38132, DEBIAN-CVE-2025-38132, GHSA-gqgv-qr8f-vwmq, ROOT-OS-DEBIAN-12-CVE-2025-38132, ROOT-OS-DEBIAN-13-CVE-2025-38132, ROOT-OS-UBUNTU-2404-CVE-2025-38132 and 1 more.