CVE-2025-38168

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

perf: arm-ni: Unregister PMUs on probe failure

When a resource allocation fails in one clock domain of an NI device,

we need to properly roll back all previously registered perf PMUs in

other clock domains of the same device.

Otherwise, it can lead to kernel panics.

Calling arm_ni_init+0x0/0xff8 [arm_ni] @ 2374

arm-ni ARMHCB70:00: Failed to request PMU region 0x1f3c13000

arm-ni ARMHCB70:00: probe with driver arm-ni failed with error -16

list_add corruption: next->prev should be prev (fffffd01e9698a18),

but was 0000000000000000. (next=ffff10001a0decc8).

pstate: 6340009 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)

pc : list_add_valid_or_report+0x7c/0xb8

lr : list_add_valid_or_report+0x7c/0xb8

Call trace:

__list_add_valid_or_report+0x7c/0xb8

perf_pmu_register+0x22c/0x3a0

arm_ni_probe+0x554/0x70c [arm_ni]

platform_probe+0x70/0xe8

really_probe+0xc6/0x4d8

driver_probe_device+0x48/0x170

__driver_attach+0x8e/0x1c0

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References