CVE-2025-38565perf/core: Exit early on perf_mmap() fail
- 7.8HighCVSS base score
- 0.20%Exploitation in 30 daysEPSS · top 90% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perf_mmap() fail When perf_mmap() fails to allocate a buffer, it still invokes the event_mapped() callback of the related event. On X86 this might increase the perf_rdpmc_allowed reference counter. But nothing undoes this as perf_mmap_close() is never called in this case, which causes another reference count leak. Return early on failure to prevent that.
Timeline
ID reserved
By Linux
- 4 months later
· 4 months later
Published
- 15 months later
· 15 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.20% · top 90% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb – < 5ffda7f3ed76ec8defc19d985e33b3b82ba07839
- affected 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb – < 9b90a48c7de828a15c7a4fc565d46999c6e22d6b
- affected 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb – < de85e72598d89880a02170a1cbc27b35a7d978a9
- affected 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb – < 27d44145bd576bbef9bf6165bcd78128ec3e6cbd
- affected 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb – < f41e9eba77bf97626e04296dc5677d02816d2432
- affected 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb – < 92043120a2e992800580855498ab8507e1b22db9
- affected 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb – < 163b0d1a209fe0df5476c1df2330ca12b55abf92
- affected 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb – < 7ff8521f30c4c2fcd4e88bd7640486602bf8a650
- affected 1e0fb9ec679c9273a641f1d6f3d25ea47baef2bb – < 07091aade394f690e7b655578140ef84d0e8d7b0
- affected 4.0
- unaffected < 4.0
- unaffected 5.4.297 – ≤ 5.4.*
- unaffected 5.10.241 – ≤ 5.10.*
- unaffected 5.15.190 – ≤ 5.15.*
- unaffected 6.1.148 – ≤ 6.1.*
- unaffected 6.6.102 – ≤ 6.6.*
- unaffected 6.12.42 – ≤ 6.12.*
- unaffected 6.15.10 – ≤ 6.15.*
- unaffected 6.16.1 – ≤ 6.16.*
- unaffected 6.17 – ≤ *
References
References11
- https://git.kernel.org/stable/c/5ffda7f3ed76ec8defc19d985e33b3b82ba07839 (opens in a new tab)
- https://git.kernel.org/stable/c/9b90a48c7de828a15c7a4fc565d46999c6e22d6b (opens in a new tab)
- https://git.kernel.org/stable/c/de85e72598d89880a02170a1cbc27b35a7d978a9 (opens in a new tab)
- https://git.kernel.org/stable/c/27d44145bd576bbef9bf6165bcd78128ec3e6cbd (opens in a new tab)
- https://git.kernel.org/stable/c/f41e9eba77bf97626e04296dc5677d02816d2432 (opens in a new tab)
- https://git.kernel.org/stable/c/92043120a2e992800580855498ab8507e1b22db9 (opens in a new tab)
- https://git.kernel.org/stable/c/163b0d1a209fe0df5476c1df2330ca12b55abf92 (opens in a new tab)
- https://git.kernel.org/stable/c/7ff8521f30c4c2fcd4e88bd7640486602bf8a650 (opens in a new tab)
- https://git.kernel.org/stable/c/07091aade394f690e7b655578140ef84d0e8d7b0 (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-26104 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-38565)Record last updated .