5.5

CVE-2025-38132: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2025-38132DEBIAN-CVE-2025-38132CGA-23x9-mqp8-j6j7
Published 03-07-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2025-38132 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.6% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.16%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 18 · Related 19
SUSE-SU-2025:02853-1SUSE-SU-2025:02923-1SUSE-SU-2025:02969-1SUSE-SU-2025:02996-1SUSE-SU-2025:02997-1SUSE-SU-2025:03011-1

Timeline

  1. 03-07-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfg_csdev_lock while removing cscfg from csdev There'll be possible race scenario for coresight config: CPU0 CPU1 (perf enable) load module cscfg_load_config_sets() activate config. // sysfs (sys_active_cnt == 1) ... cscfg_csdev_enable_active_config() lock(csdev->cscfg_csdev_lock) deactivate config // sysfs (sys_activec_cnt == 0) cscfg_unload_config_sets() <iterating config_csdev_list> cscfg_remove_owned_csdev_configs() // here load config activate by CPU1 unlock(csdev->cscfg_csdev_lock) iterating config_csdev_list could be raced with config_csdev_list's entry delete. To resolve this race , hold csdev->cscfg_csdev_lock() while cscfg_remove_owned_csdev_configs()

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.16%

Chance of exploitation in the next 30 days

Percentile

5%

Versus all other CVEs

30-day change

+0.02 pp

From 0.14% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.16%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu121 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Chainguard5 products
  • linux-aws-6.12< 6.12.76-r0 | < 6.12.80-r0 | < 6.12.71-r0 | < 6.12.77-r1 | < 6.12.72-r0 | < 6.12.60-r4 | < 6.12.78-r0 | < 6.12.62-r2 | < 6.12.62-r1 | < 6.12.69-r0 | < 6.12.74-r1 | < 6.12.66-r0 | < 6.12.68-r0 | < 6.12.65-r1 | < 6.12.77-r2 | < 6.12.68-r1 | < 6.12.72-r1 | < 6.12.70-r0 | < 6.12.62-r0 | < 6.12.67-r0 | < 6.12.63-r0 | < 6.12.65-r0 | < 6.12.77-r0 | < 6.12.74-r0 | < 6.12.65-r2
  • linux-azure-6.12< 6.12.74-r1 | < 6.12.68-r0 | < 6.12.74-r0 | < 6.12.70-r0 | < 6.12.65-r3 | < 6.12.66-r0 | < 6.12.63-r0 | < 6.12.62-r0 | < 6.12.78-r0 | < 6.12.77-r1 | < 6.12.72-r0 | < 6.12.76-r0 | < 6.12.65-r1 | < 6.12.62-r2 | < 6.12.69-r0 | < 6.12.65-r4 | < 6.12.71-r0 | < 6.12.77-r2 | < 6.12.60-r3 | < 6.12.67-r0 | < 6.12.77-r0 | < 6.12.80-r0 | < 6.12.60-r4 | < 6.12.65-r2 | < 6.12.62-r1
  • linux-gcp-6.12< 6.12.68-r1 | < 6.12.60-r4 | < 6.12.70-r0 | < 6.12.80-r0 | < 6.12.74-r1 | < 6.12.72-r0 | < 6.12.65-r0 | < 6.12.78-r0 | < 6.12.77-r0 | < 6.12.77-r1 | < 6.12.69-r0 | < 6.12.65-r2 | < 6.12.62-r0 | < 6.12.65-r1 | < 6.12.62-r1 | < 6.12.74-r0 | < 6.12.60-r3 | < 6.12.67-r0 | < 6.12.71-r0 | < 6.12.62-r2 | < 6.12.68-r0 | < 6.12.76-r0 | < 6.12.77-r2 | < 6.12.63-r0 | < 6.12.66-r0
  • linux-qemu-6.12< 6.12.74-r0 | < 6.12.65-r2 | < 6.12.77-r2 | < 6.12.65-r1 | < 6.12.69-r0 | < 6.12.77-r1 | < 6.12.80-r0 | < 6.12.67-r0 | < 6.12.72-r0 | < 6.12.74-r1 | < 6.12.71-r0 | < 6.12.70-r0 | < 6.12.68-r0 | < 6.12.77-r0 | < 6.12.66-r0 | < 6.12.78-r0 | < 6.12.76-r0
  • linux-vmware-6.12< 6.12.77-r0 | < 6.12.66-r0 | < 6.12.71-r0 | < 6.12.65-r1 | < 6.12.77-r2 | < 6.12.74-r1 | < 6.12.68-r1 | < 6.12.72-r0 | < 6.12.68-r0 | < 6.12.67-r0 | < 6.12.76-r0 | < 6.12.77-r1 | < 6.12.78-r0 | < 6.12.65-r2 | < 6.12.70-r0 | < 6.12.80-r0 | < 6.12.74-r0 | < 6.12.69-r0
Linux2 products
  • linux≥ 02bd588e12df405bdf55244708151b7f238b79ba, < 42f8afb0b161631fd1d814d017f75f955475ad41 | ≥ 02bd588e12df405bdf55244708151b7f238b79ba, < 53b9e2659719b04f5ba7593f2af0f2335f75e94a | 5.17
  • linux_kernel≥ 5.17, < 6.15.3
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.16.3-1

4 vendors · 129 products

References

13 links
Show all 13 references