CVE-2026-80623

coresight: ete: Always save state on power down

State: Published
Severity: Not scored
Published: Aug 28, 2026
Updated: Oct 30, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

coresight: ete: Always save state on power down

System register ETMs and ETE are unlikely to be preserved on CPU power down. The ETE DT binding also never documented "arm,coresight-loses-context-with-cpu" so nobody would have legitimately been able to use that binding to fix it and ACPI has no such binding at all.

Fix it by hard coding the setting for sysreg ETMs (ETE is always sysreg) or ACPI boots. Use a local variable when setting up save_state so that it's immune to concurrent probing when devices have different configurations which is an issue with modifying the global.

This fixes the following error when using Coresight with ACPI on the FVP which supports CPU PM:

coresight ete0: External agent took claim tag WARNING: drivers/hwtracing/coresight/coresight-core.c:248 at coresight_disclaim_device_unlocked+0xe0/0xe8, CPU#0: perf/117

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	35e1c9163e025855f23a68f2470c471509e5d779 to before 0f8396271d7026583bcaa71ffe2e7f6025244705Affected 35e1c9163e025855f23a68f2470c471509e5d779 to before 31633ba13cc49017015f606d5c66eaf5052e99a8Affected 35e1c9163e025855f23a68f2470c471509e5d779 to before f58d17798882a3aa3323f9d80fe85e25a38f4b93Affected 35e1c9163e025855f23a68f2470c471509e5d779 to before 65d87f28daec31903fc39fee0744f7a0059c19f2Affected 35e1c9163e025855f23a68f2470c471509e5d779 to before 293dacd5b6a9f1275d92ca6c4fd874e54b2c8319Affected 35e1c9163e025855f23a68f2470c471509e5d779 to before 2ab4645fe4206c142a5f1491e191c906279686cfAffected
LinuxLinux	5.13Affected before 5.13Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

35e1c9163e025855f23a68f2470c471509e5d779 to before 0f8396271d7026583bcaa71ffe2e7f6025244705Affected
35e1c9163e025855f23a68f2470c471509e5d779 to before 31633ba13cc49017015f606d5c66eaf5052e99a8Affected
35e1c9163e025855f23a68f2470c471509e5d779 to before f58d17798882a3aa3323f9d80fe85e25a38f4b93Affected
35e1c9163e025855f23a68f2470c471509e5d779 to before 65d87f28daec31903fc39fee0744f7a0059c19f2Affected
35e1c9163e025855f23a68f2470c471509e5d779 to before 293dacd5b6a9f1275d92ca6c4fd874e54b2c8319Affected
35e1c9163e025855f23a68f2470c471509e5d779 to before 2ab4645fe4206c142a5f1491e191c906279686cfAffected

LinuxLinux

5.13Affected
before 5.13Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.