---
id: CVE-2025-38132
title: 'coresight: holding cscfg_csdev_lock while removing cscfg from csdev'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  coresight: holding cscfg_csdev_lock while removing cscfg from csdev

  There'll be possible race scenario for coresight config:

  CPU0                                     …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 02bd588e12df405bdf55244708151b7f238b79ba <
    18a3a21c39cca593762aa90f322bd74c18ec59d4
  - >-
    Linux >= 02bd588e12df405bdf55244708151b7f238b79ba <
    1cd09aaf47a570bf6b05a7cd06b98e9d35fe82c7
  - >-
    Linux >= 02bd588e12df405bdf55244708151b7f238b79ba <
    8f16b9caf0bdba46044e1d3727ee78291aa36347
  - >-
    Linux >= 02bd588e12df405bdf55244708151b7f238b79ba <
    42f8afb0b161631fd1d814d017f75f955475ad41
  - >-
    Linux >= 02bd588e12df405bdf55244708151b7f238b79ba <
    53b9e2659719b04f5ba7593f2af0f2335f75e94a
  - Linux 5.17
published: '2025-07-03'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:21:43.550Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38132'
references:
  - url: 'https://git.kernel.org/stable/c/18a3a21c39cca593762aa90f322bd74c18ec59d4'
  - url: 'https://git.kernel.org/stable/c/1cd09aaf47a570bf6b05a7cd06b98e9d35fe82c7'
  - url: 'https://git.kernel.org/stable/c/8f16b9caf0bdba46044e1d3727ee78291aa36347'
  - url: 'https://git.kernel.org/stable/c/42f8afb0b161631fd1d814d017f75f955475ad41'
  - url: 'https://git.kernel.org/stable/c/53b9e2659719b04f5ba7593f2af0f2335f75e94a'
tags:
  - cve.org
epss: 0.00225
epssPercentile: 0.13219
ingestedAt: '2026-10-21T12:48:53.707Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

coresight: holding cscfg_csdev_lock while removing cscfg from csdev

There'll be possible race scenario for coresight config:

CPU0                                          CPU1
(perf enable)                                 load module
                                              cscfg_load_config_sets()
                                              activate config. // sysfs
                                              (sys_active_cnt == 1)
...
cscfg_csdev_enable_active_config()
  lock(csdev->cscfg_csdev_lock)
                                              deactivate config // sysfs
                                              (sys_activec_cnt == 0)
                                              cscfg_unload_config_sets()
  <iterating config_csdev_list>               cscfg_remove_owned_csdev_configs()
  // here load config activate by CPU1
  unlock(csdev->cscfg_csdev_lock)

iterating config_csdev_list could be raced with config_csdev_list's
entry delete.

To resolve this race , hold csdev->cscfg_csdev_lock() while
cscfg_remove_owned_csdev_configs()

## Affected

- `Linux >= 02bd588e12df405bdf55244708151b7f238b79ba < 18a3a21c39cca593762aa90f322bd74c18ec59d4`
- `Linux >= 02bd588e12df405bdf55244708151b7f238b79ba < 1cd09aaf47a570bf6b05a7cd06b98e9d35fe82c7`
- `Linux >= 02bd588e12df405bdf55244708151b7f238b79ba < 8f16b9caf0bdba46044e1d3727ee78291aa36347`
- `Linux >= 02bd588e12df405bdf55244708151b7f238b79ba < 42f8afb0b161631fd1d814d017f75f955475ad41`
- `Linux >= 02bd588e12df405bdf55244708151b7f238b79ba < 53b9e2659719b04f5ba7593f2af0f2335f75e94a`
- `Linux 5.17`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.