Description
In the Linux kernel, the following vulnerability has been resolved:

coresight: ete: Always save state on power down

System register ETMs and ETE are unlikely to be preserved on CPU power
down. The ETE DT binding also never documented
"arm,coresight-loses-context-with-cpu" so nobody would have legitimately
been able to use that binding to fix it and ACPI has no such binding at
all.

Fix it by hard coding the setting for sysreg ETMs (ETE is always sysreg)
or ACPI boots. Use a local variable when setting up save_state so that
it's immune to concurrent probing when devices have different
configurations which is an issue with modifying the global.

This fixes the following error when using Coresight with ACPI on the FVP
which supports CPU PM:

coresight ete0: External agent took claim tag
WARNING: drivers/hwtracing/coresight/coresight-core.c:248 at coresight_disclaim_device_unlocked+0xe0/0xe8, CPU#0: perf/117
Published: 2026-08-28
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Diagnostic context loss due to unexpected loss of Coresight trace state during CPU power‑down events
Action: Apply Patch
AI Analysis

Impact

In the Linux kernel, the Coresight subsystem failed to preserve system register ETMs and the External Trace Enabler when a CPU powers down. The flaw, documented as “Always save state on power‑down,” caused diagnostic warnings such as “coresight ete0: External agent took claim tag” and led to loss of tracing context. This weakness is rooted in improper initialization and data integrity issues, which are reflected by CWE‑820. The impact is limited to disruption of hardware‑based diagnostics and performance monitoring; it does not appear to grant remote code execution or direct denial of service.

Affected Systems

Any Linux kernel release prior to the inclusion of the patch that hard‑codes the sysreg ETM setting is potentially impacted. The kernel CPE indicates that the entire Linux kernel family is affected, but only systems that employ the Coresight hardware tracing subsystem in combination with ACPI‑based CPU power‑down handling are within scope. Administrative or debugging tools that rely on continued tracing state during power cycles would experience interruptions or lost data.

Risk and Exploitability

The flaw exists in privileged kernel code and can only be triggered by a CPU power‑down event executed locally. Based on the description, it is inferred that a local attacker with root or equivalent privileges can induce the state loss by orchestrating a power cycle, but there is no evidence that the vulnerability can be exploited remotely or to achieve broader system compromise. The EPSS score is <1 %, and the CVSS v3.1 score is 5.5, which reflects moderate potential impact on availability and diagnostic integrity. The vulnerability is not listed in the CISA KEV catalog.

Generated by OpenCVE AI on September 2, 2026 at 06:14 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update to a kernel version that includes the commit which hard‑codes the sysreg ETM setting, ensuring Coresight tracing state is preserved across CPU power‑down events.
  • If a kernel upgrade cannot be performed immediately, disable Coresight or other hardware tracing modules before initiating CPU power‑down cycles to prevent state‑loss warnings and maintain diagnostic integrity.
  • Review ACPI and device tree configurations for Coresight, removing or correcting obsolete bindings such as “arm,coresight‑loses‑context‑with‑cpu” to ensure the subsystem operates with the latest, intended behavior.

Generated by OpenCVE AI on September 2, 2026 at 06:14 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 01 Sep 2026 22:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665

Tue, 01 Sep 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-820
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Fri, 28 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665

Fri, 28 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362

Fri, 28 Aug 2026 10:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on power down System register ETMs and ETE are unlikely to be preserved on CPU power down. The ETE DT binding also never documented "arm,coresight-loses-context-with-cpu" so nobody would have legitimately been able to use that binding to fix it and ACPI has no such binding at all. Fix it by hard coding the setting for sysreg ETMs (ETE is always sysreg) or ACPI boots. Use a local variable when setting up save_state so that it's immune to concurrent probing when devices have different configurations which is an issue with modifying the global. This fixes the following error when using Coresight with ACPI on the FVP which supports CPU PM: coresight ete0: External agent took claim tag WARNING: drivers/hwtracing/coresight/coresight-core.c:248 at coresight_disclaim_device_unlocked+0xe0/0xe8, CPU#0: perf/117
Title coresight: ete: Always save state on power down
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:48:42.371Z

Reserved: 2026-08-26T14:34:25.775Z

Link: CVE-2026-80623

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-28T08:16:46.447

Modified: 2026-08-28T08:16:46.447

Link: CVE-2026-80623

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-28T00:00:00Z

Links: CVE-2026-80623 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-02T06:15:04Z

Weaknesses