Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfgcsdevlock while removing cscfg from csdev There may be a race condition related to the coresight configuration: CPU0 CPU1 perf enable load module cscfgloadconfigsets activate config. // sysfs sysactivecnt ...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etr: Fix race condition between sysfs and perf mode When attempting to run both perf mode and sysfs mode simultaneously, the WARNON in tmcetrenablehw is triggered occasionally: WARNING: CPU: 42 PID: 3911571 at...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: fix underflow for usage of nrseqstate - 1 According to the IHI006H Embedded Trace Macrocell Architecture Specification0, TRCSEQEVR is implemented only when TRCIDR5.NUMSEQSTATE is 0b100; in that case, n ranges fr...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: coresight: For the platform case, the connection counter is incremented until the allocation succeeds. The coresightaddoutconn function increments the nroutconns counter before calling devmkreallocarray, and again before...

USN-8960-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: coresight: Properly clear the connection field. coresight devices track their connections output connections and hold a reference to the fwnode. When a device goes away, we iterate through the devices on the coresight bus and...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fixed global-out-of-bounds issue in tmcupdateetfbuffer Commit 6f755e85c332 “coresight: Added helper function for inserting synchronization packets” removed the trailing '\0' from the barrierpkt array and updat...

CVE-2026-90274

A flaw was found in the Linux kernel's CoreSight ETM4 Embedded Trace Macrocell driver. A local user could cause a denial of service DoS by triggering an integer underflow during the initialization or configuration of trace sequence event registers. When trace sequence states are not implemented b...

CVE-2026-90273

A flaw was found in the Coresight ETM4x component of the Linux kernel. This vulnerability occurs in the performance perf enable path due to missing calls to cscfgcsdevdisableactiveconfig when branch broadcast is unsupported or hardware enablement fails. This oversight can lead to a leak of...

CVE-2026-97499

A flaw was found in the Linux kernel's CoreSight subsystem. A race condition occurs in the Embedded Trace Macrocell ETM performance event callbacks when accessing device pointers during concurrent device registration and unregistration. A local user could exploit this vulnerability by running...

SUSE CVE-2026-97499

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

AZL-103988 CVE-2026-97499 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

DEBIAN-CVE-2026-97499

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

CVE-2026-97499

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

UBUNTU-CVE-2026-97499

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

CVE-2026-97499 coresight: perf: Retrieve path and source from event data

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

CVE-2026-97499 coresight: perf: Retrieve path and source from event data

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

EUVD-2026-86097

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdevsrc pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and...

CVE-2026-97499

The Linux kernel contains a vulnerability in the coresight: perf component. The issue arises because ETM perf callbacks currently use the per-CPU csdev_src pointer , which is susceptible to a race condition during device registration and unregistration. To resolve this, the fix utilizes the path ...