Linux Kernel RCU Read Lock Vulnerability in perf_iterate_ctx() Function

Vulnerability

A vulnerability has been identified in the Linux kernel's perf/core component, specifically within the perf_iterate_ctx() function. This function traverses RCU lists but currently lacks the necessary RCU read lock protection. As a result, lockdep warnings are generated when running perf probe with unshare(1) under CONFIG_PROVE_RCU_LIST=y. The absence of proper RCU read lock handling can lead to suspicious RCU usage warnings, indicating that the RCU-list was traversed outside of a designated reader section.

Impact

The lack of proper RCU read lock protection can cause lockdep warnings, which may indicate potential issues with RCU usage that could be exploited or lead to incorrect behavior in the kernel.

Remediation

The vulnerability has been addressed by adding the necessary rcu_read_lock() and rcu_read_unlock() calls around the perf_iterate_ctx() invocation in the perf_event_exec() function.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.