Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38322

perf/x86/intel: Fix crash in icl_update_topdown_event()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in icl_update_topdown_event() The perf_fuzzer found a hard-lockup crash on a RaptorLake machine: Oops: general protection fault, maybe for address 0xffff89aeceab400: 0000 CPU: 23 UID: 0 PID: 0 Comm: swapper/23 Tainted: [W]=WARN Hardware name: Dell Inc. Precision 9660/0VJ762 RIP: 0010:native_read_pmc+0x7/0x40 Code: cc e8 8d a9 01 00 48 89 03 5b cd cc cc cc cc 0f 1f ... RSP: 000:fffb03100273de8 EFLAGS: 00010046 .... Call Trace: <TASK> icl_update_topdown_event+0x165/0x190 ? ktime_get+0x38/0xd0 intel_pmu_read_event+0xf9/0x210 __perf_event_read+0xf9/0x210 CPUs 16-23 are E-core CPUs that don't support the perf metrics feature. The icl_update_topdown_event() should not be invoked on these CPUs. It's a regression of commit: f9bdf1f95339 ("perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read") The bug introduced by that commit is that the is_topdown_event() function is mistakenly used to replace the is_topdown_count() call to check if the topdown functions for the perf metrics feature should be invoked. Fix it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 781b2db0eb7731fbde510c268b7ccc62959c3feb to < 702ea6028032d6c1fe96c2d4762a3575e3654819affected
  • e7f6922c8a5b41522a8329ea6bbf815993b2dd28 to < 79e2dd573116d3338507c311460da9669095c94daffected
  • 3a8bec6583e5239de3bd597ab382dc6c2b0c29a1 to < e97c45c770f5e56c784a46c2a96ab968d26b97d9affected
  • f9bdf1f953392c9edd69a7f884f78c0390127029 to < a85cc69acdcb05f8cd226b8ea0778b8e2e887e6faffected
  • f9bdf1f953392c9edd69a7f884f78c0390127029 to < b0823d5fbacb1c551d793cbfe7af24e0d1fa45edaffected
  • 06cd7bfbb86e9db3e9013ea6636ad2c6f0a1664daffected
  • d8370aa704bd7e384918c8f466856374725c0585affected
  • 6.1.134 to < 6.1.149affected
  • 6.6.87 to < 6.6.101affected
  • 6.12.23 to < 6.12.49affected
  • 6.13.11 to < 6.14affected
  • 6.14.2 to < 6.15affected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.1.149 to ≤ 6.1.*unaffected
  • 6.6.101 to ≤ 6.6.*unaffected
  • 6.12.49 to ≤ 6.12.*unaffected
  • 6.15.4 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References