In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix deadlock between rcutaskstrace and event_mutex.
Fix the following deadlock: CPU A freeevent() perfkprobedestroy() mutexlock(&eventmutex) perftraceeventunreg() synchronizercutaskstrace()
There are several paths where freeevent() grabs eventmutex and calls syncrcutaskstrace. Above is one such case.
CPU B bpfprogtestrunsyscall() rcureadlocktrace() bpfprogrunpinoncpu() bpfprogload() bpftracingfuncproto() tracesetclrevent() mutexlock(&eventmutex)
Delegate tracesetclr_event() to workqueue to avoid such lock dependency.
[
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 86.0,
"function_hash": "271146210962747943942853258358065753900"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "bpf_get_trace_vprintk_proto"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4580f4e0ebdf8dc8d506ae926b88510395a0c1d1",
"signature_version": "v1",
"id": "CVE-2025-37884-1306aa7c"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 150.0,
"function_hash": "162308656118447206594286335709087228499"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "__set_printk_clr_event"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@255cbc9db7067a83713fd2f4b31034ddd266549a",
"signature_version": "v1",
"id": "CVE-2025-37884-2628ca83"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 86.0,
"function_hash": "271146210962747943942853258358065753900"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "bpf_get_trace_vprintk_proto"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@255cbc9db7067a83713fd2f4b31034ddd266549a",
"signature_version": "v1",
"id": "CVE-2025-37884-2bdcc205"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"238310459554618353036641478478611152470",
"257467308593328333218056798265607507929",
"238078588482943215834386977971750546743",
"288279698679147627734359352383631018354",
"119467044828146697017694390609639659968",
"324278551546444641624044780956809940491",
"160970680336815725003912074837854572367",
"277730535280777975945924550540583920515",
"177765652502821219488014005353123873828",
"5826192014723389821433289799385440580",
"94276222479218661301563844551078919458",
"87570599574855286409420005176159979920",
"145344996606423695824570911590740014145",
"131681074499593941441171700408261256043",
"69518204034688931571252060791829719497"
],
"threshold": 0.9
},
"target": {
"file": "kernel/trace/bpf_trace.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5a528a34e1f613565115a7a6016862ccbfcb9ac",
"signature_version": "v1",
"id": "CVE-2025-37884-30d35dd8"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 85.0,
"function_hash": "34292355835849115762160743878281225351"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "bpf_get_trace_printk_proto"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4580f4e0ebdf8dc8d506ae926b88510395a0c1d1",
"signature_version": "v1",
"id": "CVE-2025-37884-54ae8dbe"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 86.0,
"function_hash": "271146210962747943942853258358065753900"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "bpf_get_trace_vprintk_proto"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@45286680b385f2592db3003554872388dee66d68",
"signature_version": "v1",
"id": "CVE-2025-37884-58a199d2"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 86.0,
"function_hash": "271146210962747943942853258358065753900"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "bpf_get_trace_vprintk_proto"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5a528a34e1f613565115a7a6016862ccbfcb9ac",
"signature_version": "v1",
"id": "CVE-2025-37884-6333e1ef"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 150.0,
"function_hash": "162308656118447206594286335709087228499"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "__set_printk_clr_event"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4580f4e0ebdf8dc8d506ae926b88510395a0c1d1",
"signature_version": "v1",
"id": "CVE-2025-37884-658901c9"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 85.0,
"function_hash": "34292355835849115762160743878281225351"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "bpf_get_trace_printk_proto"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5a528a34e1f613565115a7a6016862ccbfcb9ac",
"signature_version": "v1",
"id": "CVE-2025-37884-67acbc8a"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 150.0,
"function_hash": "162308656118447206594286335709087228499"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "__set_printk_clr_event"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5a528a34e1f613565115a7a6016862ccbfcb9ac",
"signature_version": "v1",
"id": "CVE-2025-37884-7978fb12"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 85.0,
"function_hash": "34292355835849115762160743878281225351"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "bpf_get_trace_printk_proto"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@45286680b385f2592db3003554872388dee66d68",
"signature_version": "v1",
"id": "CVE-2025-37884-7e0cb643"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"238310459554618353036641478478611152470",
"257467308593328333218056798265607507929",
"238078588482943215834386977971750546743",
"288279698679147627734359352383631018354",
"119467044828146697017694390609639659968",
"324278551546444641624044780956809940491",
"160970680336815725003912074837854572367",
"277730535280777975945924550540583920515",
"177765652502821219488014005353123873828",
"5826192014723389821433289799385440580",
"94276222479218661301563844551078919458",
"87570599574855286409420005176159979920",
"145344996606423695824570911590740014145",
"131681074499593941441171700408261256043",
"69518204034688931571252060791829719497"
],
"threshold": 0.9
},
"target": {
"file": "kernel/trace/bpf_trace.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@45286680b385f2592db3003554872388dee66d68",
"signature_version": "v1",
"id": "CVE-2025-37884-8e106fbe"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"238310459554618353036641478478611152470",
"257467308593328333218056798265607507929",
"238078588482943215834386977971750546743",
"288279698679147627734359352383631018354",
"119467044828146697017694390609639659968",
"324278551546444641624044780956809940491",
"160970680336815725003912074837854572367",
"277730535280777975945924550540583920515",
"177765652502821219488014005353123873828",
"5826192014723389821433289799385440580",
"94276222479218661301563844551078919458",
"87570599574855286409420005176159979920",
"145344996606423695824570911590740014145",
"131681074499593941441171700408261256043",
"69518204034688931571252060791829719497"
],
"threshold": 0.9
},
"target": {
"file": "kernel/trace/bpf_trace.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4580f4e0ebdf8dc8d506ae926b88510395a0c1d1",
"signature_version": "v1",
"id": "CVE-2025-37884-91a7ab56"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"238310459554618353036641478478611152470",
"257467308593328333218056798265607507929",
"238078588482943215834386977971750546743",
"288279698679147627734359352383631018354",
"119467044828146697017694390609639659968",
"324278551546444641624044780956809940491",
"160970680336815725003912074837854572367",
"277730535280777975945924550540583920515",
"177765652502821219488014005353123873828",
"5826192014723389821433289799385440580",
"94276222479218661301563844551078919458",
"87570599574855286409420005176159979920",
"145344996606423695824570911590740014145",
"131681074499593941441171700408261256043",
"69518204034688931571252060791829719497"
],
"threshold": 0.9
},
"target": {
"file": "kernel/trace/bpf_trace.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@255cbc9db7067a83713fd2f4b31034ddd266549a",
"signature_version": "v1",
"id": "CVE-2025-37884-9bc4a7d7"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 150.0,
"function_hash": "162308656118447206594286335709087228499"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "__set_printk_clr_event"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@45286680b385f2592db3003554872388dee66d68",
"signature_version": "v1",
"id": "CVE-2025-37884-c8baf4f5"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 85.0,
"function_hash": "34292355835849115762160743878281225351"
},
"target": {
"file": "kernel/trace/bpf_trace.c",
"function": "bpf_get_trace_printk_proto"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@255cbc9db7067a83713fd2f4b31034ddd266549a",
"signature_version": "v1",
"id": "CVE-2025-37884-f433f822"
}
]