Impact
The Linux kernel’s coresight tmc‑etr subsystem contains a race condition between sysfs and perf operations. When sysfs mode and perf mode are enabled concurrently, tmc_etr_enable_hw may be executed while the buffer pointer is uninitialized or already allocated, triggering a WARN_ON. This pathological sequence can corrupt kernel memory or cause a panic, resulting in denial of service.
Affected Systems
Any Linux kernel that includes the coresight_tmc driver and is built with tracepoint support can be affected. The CVE does not list specific release versions, so all builds prior to the commit that implements the double‑check are potentially vulnerable. This encompasses mainstream distributions as well as custom kernels that enable the coresight_tmc configuration.
Risk and Exploitability
The advisory does not provide a CVSS score, and EPSS data is unavailable while the vulnerability is not in the CISA KEV catalog. This suggests that no confirmed exploitation has been observed. Based on the description, it is inferred that an attacker would need local or privileged access to simultaneously issue sysfs writes and engage perf on the same hardware, making it a local‑threat scenario. Nonetheless, because the flaw can cause kernel memory corruption and a potential crash, the risk to availability is significant for affected systems.
OpenCVE Enrichment