CVE-2025-40327

Description

A flaw was found in the Linux kernel's perf subsystem. When using cpu-clock events, the __perf_event_overflow() callback is invoked from an hrtimer handler. This callback attempts to stop the event by calling cpu_clock_event_stop(), which in turn calls hrtimer_cancel() to cancel the hrtimer. This results in recursive entry into the hrtimer code from within an hrtimer handler, causing a deadlock and system hang. A local user with the ability to create perf events could exploit this to cause a denial of service.

Déclaration

This issue affects systems where local users can create perf cpu-clock events. The vulnerability requires local access and the ability to use the perf_event_open() system call, which may be restricted by the kernel.perf_event_paranoid sysctl setting. Exploitation leads to a system hang requiring a reboot to recover.

Détails du score du système commun d'évaluation des vulnérabilités (CVSS)

Info alert:Important note

CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).

Les mesures et les scores CVSS suivants sont préliminaires et sujets à révision.

Répartition des scores CVSS v3

Red HatNVDcve.org
Score de base6.5N/AN/A
Vecteur d'attaqueLocalN/AN/A
Complexité de l'attaqueHighN/AN/A
Privilèges requisLowN/AN/A
Interaction avec l'utilisateurNoneN/AN/A
Champ d'applicationUnchangedN/AN/A
ConfidentialitéLowN/AN/A
Impact sur l'intégritéHighN/AN/A
Impact sur la disponibilitéHighN/AN/A

Vecteur

Red Hat: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H

Questions fréquemment posées

Not sure what something means? Check out our Security Glossary.

Vous souhaitez recevoir des notifications d'errata ? Signez ici.