Active Configuration Deactivation Vulnerability in Linux Kernel
Summary
CVE-2025-38131: In the Linux kernel, the following vulnerability has been resolved: coresight: prevent deactivate active config while enabling the config While enable active config via cscfg_csdev_enable_active_config(), active config c... Affects linux versions < 6.1.147-1. Fixed in 6.1.147-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware and system resources. It provides essential services for all other parts of the system, including process management, memory management, and device control. The kernel is highly modular, allowing for the addition of various functionalities through loadable modules. However, this modularity can introduce vulnerabilities, such as the one described here, which affects the configuration management of the CoreSight subsystem.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the CoreSight subsystem where an active configuration could be deactivated while it is being enabled. This occurs when the function cscfg_csdev_enable_active_config() is called, allowing a race condition between two CPUs. Specifically, if CPU0 enables the configuration via the sysfs interface while CPU1 loads a module that activates the configuration, it can lead to a use-after-free (UAF) condition. This happens because the configuration descriptor may be accessed after it has been freed, potentially leading to system instability or exploitation.
How To Fix
Minimum fixed version
6.1.147-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid enabling active configurations through the sysfs interface while modules are being loaded. This can help mitigate the risk of encountering the vulnerability until a patch is applied.
Conclusion
The vulnerability identified in the Linux kernel's CoreSight subsystem poses a significant risk due to the potential for a use-after-free condition. It is crucial for users to update their systems to the latest kernel version to mitigate this risk. Additionally, employing temporary workarounds can help reduce exposure until a patch is applied.
See every vulnerability recorded for linux →
FAQ
The vulnerability allows for a race condition that can lead to a use-after-free scenario in the Linux kernel's CoreSight subsystem.
The vulnerability affects all versions of the Linux kernel prior to the patch release that addresses this issue.
You can use Vulert, which monitors open-source vulnerabilities in your software. By using the Vulert playground, you can check if your application is affected by this vulnerability without any signup.
Exploitation of this vulnerability could lead to system crashes, instability, or unauthorized access to system resources.
Yes, the permanent fix is to update the Linux kernel to the latest patched version that resolves this issue.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
