Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- >= 6.18.0-ftest-11964-ge022764176fc-dirty, < 6.18.0-ftest-11964-ge022764176fc-dirty
A vulnerability in the Linux kernel's tracing system can lead to a warning being triggered when synthetic events are processed. This issue arises because synthetic events lack a proper mechanism to register performance events, causing the tracepoint registration functions to receive a NULL function pointer. As a result, a warning is generated, indicating a problem with the event registration. The vulnerability has been observed in Linux kernel version 6.18.0, in a QEMU virtual machine environment.
The vulnerability causes a warning to be issued during the registration of synthetic performance events, indicating that the event could not be properly registered. This warning can be seen in the kernel's tracepoint handling code, where it reports the issue with the synthetic event registration.
The vulnerability can be reproduced by attempting to register a synthetic performance event using the 'perf' command. This will trigger a warning indicating that the event could not be registered, due to the lack of a proper registration function for synthetic events.
The vulnerability has been addressed in the Linux kernel by modifying the event registration process for synthetic events. Users can upgrade to the latest version of the Linux kernel to apply this fix.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.