Critical RISC-V Uprobes Vulnerability in Linux Package: Missing Fence.i After XOL Buffer Construction
Summary
CVE-2025-37822: In the Linux kernel, the following vulnerability has been resolved: riscv: uprobes: Add missing fence.i after building the XOL buffer The XOL (execute out-of-line) buffer is used to single-step the replaced instruction(s... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a widely used open-source operating system kernel that serves as the foundation for various operating systems, including Debian. It is known for its stability, performance, and flexibility. The kernel manages system resources and provides essential services for software applications. However, it is susceptible to vulnerabilities that can compromise system integrity and security. This specific vulnerability affects the RISC-V architecture, which is an open standard instruction set architecture (ISA) that is gaining traction in various computing environments.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the RISC-V port related to uprobes, which are used for debugging and performance analysis. The issue arises from a missing fence.i instruction after constructing the XOL (execute out-of-line) buffer. This omission can lead to the execution of stale or broken instructions, potentially causing erratic behavior or crashes during the execution of programs that rely on uprobes. The vulnerability was discovered while running BPF self-tests on specific hardware, highlighting its impact on real-world applications.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating the Linux package as described in the 'how_to_fix' section.
Conclusion
The CVE-2025-37822 vulnerability in the Linux kernel's RISC-V port poses a significant risk due to the missing fence.i instruction after constructing the XOL buffer. Users are encouraged to update their systems to the latest patched version of the Linux package to mitigate this risk. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
The impact includes potential incorrect execution of instructions, leading to application crashes or erratic behavior.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
The urgency for this vulnerability has not yet been assigned, but it is advisable to address it promptly to ensure system stability.
Yes, a patch is available in the latest version of the Linux package. Ensure you update to the patched version to mitigate the risk.
Uprobes are a mechanism in the Linux kernel that allows users to dynamically insert probes into running applications for debugging and performance monitoring.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
