CVE-2025-37822

riscv: uprobes: Add missing fence.i after building the XOL buffer

State: Published
Severity: 7.8 High
Published: May 8, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: uprobes: Add missing fence.i after building the XOL buffer

The XOL (execute out-of-line) buffer is used to single-step the replaced instruction(s) for uprobes. The RISC-V port was missing a proper fence.i (i$ flushing) after constructing the XOL buffer, which can result in incorrect execution of stale/broken instructions.

This was found running the BPF selftests "test_progs: uprobe_autoattach, attach_probe" on the Spacemit K1/X60, where the uprobes tests randomly blew up.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	74784081aac8a0f3636965fc230e2d3b7cc123c6 to before be6d98766ac952d38241d5a5b213f363afa421c3Affected 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before b6d8d4d01ca8514fa89b05355f296758a91e2297Affected 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before 77c956152a3a7c7a18b68f3654f70565b2181d03Affected 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before bcf6d3158c5902d92b6d62335af4422b7bf7c4e2Affected 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before 1dbb95a36499374c51b47ee8ae258a8862c20978Affected 74784081aac8a0f3636965fc230e2d3b7cc123c6 to before 7d1d19a11cfbfd8bae1d89cc010b2cc397cd0c48Affected
LinuxLinux	5.12Affected before 5.12Not affected 5.15.200 through 5.15.Not affected 6.1.163 through 6.1.Not affected 6.6.121 through 6.6.Not affected 6.12.26 through 6.12.Not affected 6.14.5 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

74784081aac8a0f3636965fc230e2d3b7cc123c6 to before be6d98766ac952d38241d5a5b213f363afa421c3Affected
74784081aac8a0f3636965fc230e2d3b7cc123c6 to before b6d8d4d01ca8514fa89b05355f296758a91e2297Affected
74784081aac8a0f3636965fc230e2d3b7cc123c6 to before 77c956152a3a7c7a18b68f3654f70565b2181d03Affected
74784081aac8a0f3636965fc230e2d3b7cc123c6 to before bcf6d3158c5902d92b6d62335af4422b7bf7c4e2Affected
74784081aac8a0f3636965fc230e2d3b7cc123c6 to before 1dbb95a36499374c51b47ee8ae258a8862c20978Affected
74784081aac8a0f3636965fc230e2d3b7cc123c6 to before 7d1d19a11cfbfd8bae1d89cc010b2cc397cd0c48Affected

LinuxLinux

5.12Affected
before 5.12Not affected
5.15.200 through 5.15.*Not affected
6.1.163 through 6.1.*Not affected
6.6.121 through 6.6.*Not affected
6.12.26 through 6.12.*Not affected
6.14.5 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.