Threats tagged 'ghsa-hjw2-6772-mrxq'

CVE-2025-38267 is a high severity vulnerability in the Linux kernel's ring-buffer subsystem. It involves an incorrect triggering of WARN_ON() due to a commit_overrun condition when reading a memory mapped buffer. This occurs when an interrupt preempts an event being written, causing the buffer to wrap and drop new events, which was not properly handled, leading to kernel warnings and potential instability. The issue was observed under specific conditions involving lockdep, KASAN, and kmemleak enabled with heavy tracing workloads.