Skip to main content
VulnerabilityPublished Updated

CVE-2025-38322: Linux kernel · perf/x86/intel: Fix crash in icl_update_topdown_event()

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in e97c45c770f5e56c784a46c2a96ab968d26b97d9 : patch Linux kernel soon.

Data as of 10 Nov 2026, 12:50 UTC

Severity
High

Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
Patch
Available – fixed in e97c45c770f5e56c784a46c2a96ab968d26b97d9, b0823d5fbacb1c551d793cbfe7af24e0d1fa45ed, a85cc69acdcb05f8cd226b8ea0778b8e2e887e6f +7

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 10 Jul 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • >=6.1.134 <6.1.149
  • >=6.6.87 <6.6.101
  • >=6.12.23 <6.12.49
  • >=6.13.11 <6.14
  • >=6.14.2 <6.15
Fixed in
  • e97c45c770f5e56c784a46c2a96ab968d26b97d9
  • b0823d5fbacb1c551d793cbfe7af24e0d1fa45ed
  • a85cc69acdcb05f8cd226b8ea0778b8e2e887e6f
  • 702ea6028032d6c1fe96c2d4762a3575e3654819
  • 79e2dd573116d3338507c311460da9669095c94d
  • 6.15
  • 6.14
  • 6.12.49
  • 6.6.101
  • 6.1.149
LinuxLinuxAffected
  • =6.15
Fixed in–

AI-suggested

This vulnerability has been fixed in Linux kernel versions 6.1.149, 6.6.101, 6.12.49, 6.14, 6.15, and corresponding commit hashes. Users and administrators should upgrade to these fixed versions to remediate the issue. No additional mitigation is required as the fix is available and should be applied.

Description

A vulnerability in the Linux kernel's perf subsystem on x86 Intel platforms caused a crash due to improper handling of topdown performance monitoring events on certain CPUs. Specifically, the function icl_update_topdown_event() was incorrectly invoked on E-core CPUs that do not support the perf metrics feature, leading to a general protection fault and system crash. This issue was introduced by a regression in a previous commit that replaced a correct function call with an incorrect one. The vulnerability has been fixed in multiple Linux kernel versions.

References

Community reviews

Loading reviews…