Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-68376

coresight: ETR: Fix ETR buffer use-after-free issue

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after-free issue When ETR is enabled as CS_MODE_SYSFS, if the buffer size is changed and enabled again, currently sysfs_buf will point to the newly allocated memory(buf_new) and free the old memory(buf_old). But the etr_buf that is being used by the ETR remains pointed to buf_old, not updated to buf_new. In this case, it will result in a memory use-after-free issue. Fix this by checking ETR's mode before updating and releasing buf_old, if the mode is CS_MODE_SYSFS, then skip updating and releasing it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bd2767ec3df2775bc336f441f9068a989ccb919d to < 5d5d130835b417c7bfd6c942f0149e34397d4463affected
  • bd2767ec3df2775bc336f441f9068a989ccb919d to < 4e83434247ff8005a0b9a1ee997864abf8f259ecaffected
  • bd2767ec3df2775bc336f441f9068a989ccb919d to < 70acbc9c77686b7a521af6d7a543dcd9c324cf07affected
  • bd2767ec3df2775bc336f441f9068a989ccb919d to < cda077a19f5c8d6ec61e5b97deca203d95e3a422affected
  • bd2767ec3df2775bc336f441f9068a989ccb919d to < 35501ac3c7d40a7bb9568c2f89d6b56beaf9bed3affected
  • fdd3ceb0001da6768bede9779a0190a42e65c404affected
  • 6.5.8 to < 6.6affected

Linux Linux

Default version status: affected

  • 6.6affected
  • 0 to < 6.6unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.17.13 to ≤ 6.17.*unaffected
  • 6.18.2 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References