CVE-2025-38649

arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight

published August 22, 2025

CVSS
—
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight

An infinite loop has been created by the Coresight devices. When only a

source device is enabled, the coresight_find_activated_sysfs_sink function

is recursively invoked in an attempt to locate an active sink device,

ultimately leading to a stack overflow and system crash. Therefore, disable

the replicator1 to break the infinite loop and prevent a potential stack

overflow.

replicator1_out -> funnel_swao_in6 -> tmc_etf_swao_in -> tmc_etf_swao_out

| |

replicator1_in replicator_swao_in

| |

replicator0_out1 replicator_swao_out0

| |

replicator0_in funnel_in1_in3

| |

tmc_etf_out <- tmc_etf_in <- funnel_merg_out <- funnel_merg_in1 <- funnel_in1_out

[call trace]

dump_backtrace+0x9c/0x128

show_stack+0x20/0x38

dump_stack_lvl+0x48/0x60

dump_stack+0x18/0x28

panic+0x340/0x3b0

nmi_panic+0x94/0xa0

panic_bad_stack+0x114/0x138

handle_bad_stack+0x34/0xb8

__bad_stack+0x78/0x80

coresight_find_activated_sysfs_sink+0x28/0xa0 [coresight]

coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight]

coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight]

coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight]

coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight]

...

coresight_find_activated_sysfs_sink+0x5c/0xa0 [coresight]

coresight_enable_sysfs+0x80/0x2a0 [coresight]

side effect after the change:

Only trace data originating from AOSS can reach the ETF_SWAO and EUD sinks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00181 · 7.3th percentile
Published
2025-08-22T16:00Z
EPSS history
Timeline
  • 22 AUG 16:00Z
    arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight
    cvelistv5