CVE-2025-37884
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/05/2025
Last modified:
09/05/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.<br />
<br />
Fix the following deadlock:<br />
CPU A<br />
_free_event()<br />
perf_kprobe_destroy()<br />
mutex_lock(&event_mutex)<br />
perf_trace_event_unreg()<br />
synchronize_rcu_tasks_trace()<br />
<br />
There are several paths where _free_event() grabs event_mutex<br />
and calls sync_rcu_tasks_trace. Above is one such case.<br />
<br />
CPU B<br />
bpf_prog_test_run_syscall()<br />
rcu_read_lock_trace()<br />
bpf_prog_run_pin_on_cpu()<br />
bpf_prog_load()<br />
bpf_tracing_func_proto()<br />
trace_set_clr_event()<br />
mutex_lock(&event_mutex)<br />
<br />
Delegate trace_set_clr_event() to workqueue to avoid<br />
such lock dependency.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/255cbc9db7067a83713fd2f4b31034ddd266549a
- https://git.kernel.org/stable/c/45286680b385f2592db3003554872388dee66d68
- https://git.kernel.org/stable/c/4580f4e0ebdf8dc8d506ae926b88510395a0c1d1
- https://git.kernel.org/stable/c/b5a528a34e1f613565115a7a6016862ccbfcb9ac
- https://git.kernel.org/stable/c/c5c833f6375f8ecf9254dd27946c927c7d645421