PT-2025-20530 · Linux+4 · Linux Kernel+4
Published
2025-04-06
·
Updated
2026-05-26
·
CVE-2025-37878
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a problem in the Linux kernel's perf/core subsystem, where a WARN ON ONCE() cleanup check could trigger after the initial check passed but before the child event's context was assigned, violating its precondition. This occurred due to changes in the code over time, including the addition of an early validity check and a WARN ON ONCE() cleanup check. The solution involves assigning the child event's context right after its initial validation, ensuring the context exists for any subsequent checks or cleanup routines.
Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for the perf/core subsystem, where the get ctx(child ctx) call and the child event->ctx assignment are moved to occur immediately after the child event is allocated. As a temporary workaround, consider disabling the
free event() function until a patch is available. However, since the exact affected and fixed versions are not specified, it is crucial to refer to the official Linux kernel updates for precise guidance on resolving this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Assertion Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Ubuntu