CVE-2025-40359
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/12/2025
Last modified:
16/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
perf/x86/intel: Fix KASAN global-out-of-bounds warning<br />
<br />
When running "perf mem record" command on CWF, the below KASAN<br />
global-out-of-bounds warning is seen.<br />
<br />
==================================================================<br />
BUG: KASAN: global-out-of-bounds in cmt_latency_data+0x176/0x1b0<br />
Read of size 4 at addr ffffffffb721d000 by task dtlb/9850<br />
<br />
Call Trace:<br />
<br />
kasan_report+0xb8/0xf0<br />
cmt_latency_data+0x176/0x1b0<br />
setup_arch_pebs_sample_data+0xf49/0x2560<br />
intel_pmu_drain_arch_pebs+0x577/0xb00<br />
handle_pmi_common+0x6c4/0xc80<br />
<br />
The issue is caused by below code in __grt_latency_data(). The code<br />
tries to access x86_hybrid_pmu structure which doesn&#39;t exist on<br />
non-hybrid platform like CWF.<br />
<br />
WARN_ON_ONCE(hybrid_pmu(event->pmu)->pmu_type == hybrid_big)<br />
<br />
So add is_hybrid() check before calling this WARN_ON_ONCE to fix the<br />
global-out-of-bounds access issue.



