Riskcovery

CVE-2025-38565

perf/core: Exit early on perf_mmap() fail

State
Published
Severity
Not scored
Published
Aug 19, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

perf/core: Exit early on perf_mmap() fail

When perf_mmap() fails to allocate a buffer, it still invokes the event_mapped() callback of the related event. On X86 this might increase the perf_rdpmc_allowed reference counter. But nothing undoes this as perf_mmap_close() is never called in this case, which causes another reference count leak.

Return early on failure to prevent that.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb to before 5ffda7f3ed76ec8defc19d985e33b3b82ba07839Affected
  • 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb to before 9b90a48c7de828a15c7a4fc565d46999c6e22d6bAffected
  • 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb to before de85e72598d89880a02170a1cbc27b35a7d978a9Affected
  • 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb to before 27d44145bd576bbef9bf6165bcd78128ec3e6cbdAffected
  • 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb to before f41e9eba77bf97626e04296dc5677d02816d2432Affected
  • 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb to before 92043120a2e992800580855498ab8507e1b22db9Affected
  • 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb to before 163b0d1a209fe0df5476c1df2330ca12b55abf92Affected
  • 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb to before 7ff8521f30c4c2fcd4e88bd7640486602bf8a650Affected
  • 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb to before 07091aade394f690e7b655578140ef84d0e8d7b0Affected
LinuxLinux
  • 4.0Affected
  • before 4.0Not affected
  • 5.4.297 through 5.4.*Not affected
  • 5.10.241 through 5.10.*Not affected
  • 5.15.190 through 5.15.*Not affected
  • 6.1.148 through 6.1.*Not affected
  • 6.6.102 through 6.6.*Not affected
  • 6.12.42 through 6.12.*Not affected
  • 6.15.10 through 6.15.*Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.