PT-2025-18428 · Linux+4 · Linux Kernel+4
Published
2025-04-08
·
Updated
2026-05-26
·
CVE-2025-37747
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A hang can occur while freeing a sigtrap event in the Linux kernel's perf subsystem if a related deferred signal hadn't been sent before the file got closed. This issue arises due to a problem with task work and reference counting. The hang occurs because
task work cancel() fails, leading to a wait on rcuwait wait event(). The issue is complex and involves inverted dependencies when remote targets are involved.Recommendations
To resolve this issue, acquire the event reference count upon queueing the perf task work and release it from the task work. Adjustments are necessary to make this work, including ensuring that a child event does not dereference its parent upon freeing and that places assuming the event doesn't have any reference held must instead put the reference and let the reference counting do its job.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linux Kernel
Suse
Ubuntu