CVE-2025-68376
Description
In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after-free issue When ETR is enabled as CS_MODE_SYSFS, if the buffer size is changed and enabled again, currently sysfs_buf will point to the newly allocated memory(buf_new) and free the old memory(buf_old). But the etr_buf that is being used by the ETR remains pointed to buf_old, not updated to buf_new. In this case, it will result in a memory use-after-free issue. Fix this by checking ETR's mode before updating and releasing buf_old, if the mode is CS_MODE_SYSFS, then skip updating and releasing it.
How to fix
- Linux Linux5d5d130835b417c7bfd6c942f0149e34397d4463, 4e83434247ff8005a0b9a1ee997864abf8f259ec, 70acbc9c77686b7a521af6d7a543dcd9c324cf07, cda077a19f5c8d6ec61e5b97deca203d95e3a422, 35501ac3c7d40a7bb9568c2f89d6b56beaf9bed3, 6.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | bd2767ec3df2775bc336f441f9068a989ccb919d ≤ v < 5d5d130835b417c7bfd6c942f0149e34397d4463, bd2767ec3df2775bc336f441f9068a989ccb919d ≤ v < 4e83434247ff8005a0b9a1ee997864abf8f259ec, bd2767ec3df2775bc336f441f9068a989ccb919d ≤ v < 70acbc9c77686b7a521af6d7a543dcd9c324cf07, bd2767ec3df2775bc336f441f9068a989ccb919d ≤ v < cda077a19f5c8d6ec61e5b97deca203d95e3a422, bd2767ec3df2775bc336f441f9068a989ccb919d ≤ v < 35501ac3c7d40a7bb9568c2f89d6b56beaf9bed3, fdd3ceb0001da6768bede9779a0190a42e65c404, 6.5.8 ≤ v < 6.6, 6.6 | 5d5d130835b417c7bfd6c942f0149e34397d4463, 4e83434247ff8005a0b9a1ee997864abf8f259ec, 70acbc9c77686b7a521af6d7a543dcd9c324cf07, cda077a19f5c8d6ec61e5b97deca203d95e3a422, 35501ac3c7d40a7bb9568c2f89d6b56beaf9bed3, 6.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.