CVE-2025-38649

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight

An infinite loop has been created by the Coresight devices. When only a

source device is enabled, the coresight_find_activated_sysfs_sink function

is recursively invoked in an attempt to locate an active sink device,

ultimately leading to a stack overflow and system crash. Therefore, disable

the replicator1 to break the infinite loop and prevent a potential stack

overflow.

replicator1_out -> funnel_swao_in6 -> tmc_etf_swao_in -> tmc_etf_swao_out

| |

replicator1_in replicator_swao_in

| |

replicator0_out1 replicator_swao_out0

|

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References