CVE-2025-38322: Linux kernel · perf/x86/intel: Fix crash in icl_update_topdown_event()
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in e97c45c770f5e56c784a46c2a96ab968d26b97d9 : patch Linux kernel soon.
Data as of 10 Nov 2026, 12:50 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or none- Patch
- Available – fixed in e97c45c770f5e56c784a46c2a96ab968d26b97d9, b0823d5fbacb1c551d793cbfe7af24e0d1fa45ed, a85cc69acdcb05f8cd226b8ea0778b8e2e887e6f +7
Exploitation evidence
Disclosed: evidence found.
CVE published 10 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
This vulnerability has been fixed in Linux kernel versions 6.1.149, 6.6.101, 6.12.49, 6.14, 6.15, and corresponding commit hashes. Users and administrators should upgrade to these fixed versions to remediate the issue. No additional mitigation is required as the fix is available and should be applied.
Description
A vulnerability in the Linux kernel's perf subsystem on x86 Intel platforms caused a crash due to improper handling of topdown performance monitoring events on certain CPUs. Specifically, the function icl_update_topdown_event() was incorrectly invoked on E-core CPUs that do not support the perf metrics feature, leading to a general protection fault and system crash. This issue was introduced by a regression in a previous commit that replaced a correct function call with an incorrect one. The vulnerability has been fixed in multiple Linux kernel versions.
References
- git.kernel.org/stable/c/702ea6028032d6c1fe96c2d4762a3575e3654819 (opens in a new tab)
- git.kernel.org/stable/c/79e2dd573116d3338507c311460da9669095c94d (opens in a new tab)
- git.kernel.org/stable/c/e97c45c770f5e56c784a46c2a96ab968d26b97d9 (opens in a new tab)
- git.kernel.org/stable/c/a85cc69acdcb05f8cd226b8ea0778b8e2e887e6f (opens in a new tab)
- git.kernel.org/stable/c/b0823d5fbacb1c551d793cbfe7af24e0d1fa45ed (opens in a new tab)
- lists.debian.org/debian-lts-announce/2025/10/msg00008.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-032379.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-019113.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-457936.html (opens in a new tab)