Critical Vulnerability in Linux Kernel: ARM64 Crash Due to Improper Perf Handling
Summary
CVE-2025-38424: In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs do_exit() Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to tryin... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, including various distributions of Debian. It manages system resources and hardware communication, providing essential services for software applications. This vulnerability affects the Linux package across multiple Debian versions, highlighting a flaw in the handling of performance monitoring features, specifically related to the ARM64 architecture.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified that can lead to an ARM64 crash due to improper handling of performance monitoring (perf) during the process of exiting a user space. The issue arises when the kernel attempts to access memory-mapped I/O (MMIO) inappropriately while tearing down the address space. This can lead to a synchronous external abort, causing system instability and potential crashes. The vulnerability is exacerbated by the fact that the perf subsystem continues to access user space even after the memory management structures have been cleared, creating a dangerous race condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate risks.
Conclusion
The vulnerability CVE-2025-38424 in the Linux kernel poses significant risks to systems using the ARM64 architecture. It is essential for users to update their Linux packages to the patched versions to ensure system stability and security. Monitoring tools like Vulert can assist in identifying vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38424 is a vulnerability in the Linux kernel that can cause an ARM64 crash due to improper handling of performance monitoring during user space exit.
This vulnerability can lead to system crashes and instability, particularly on systems using the ARM64 architecture.
Yes, a patch is available for Debian 13 in version 6.12.35-1. Users of Debian 11 and 12 should check for updates.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to install anything.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to avoid potential crashes.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
