CVE-2025-38564

In the Linux kernel, the following vulnerability has been resolved: perf/core: Handle buffer mapping fail correctly in perf_mmap() After successful allocation of a buffer or a successful attachment to an existing buffer perf_mmap() tries to map the buffer read only into the page table. If that fails, the already set up page table entries are zapped, but the other perf specific side effects of that failure are not handled. The calling code just cleans up the VMA and does not invoke perf_mmap_close(). This leaks reference counts, corrupts user->vm accounting and also results in an unbalanced invocation of event::event_mapped(). Cure this by moving the event::event_mapped() invocation before the map_range() call so that on map_range() failure perf_mmap_close() can be invoked without causing an unbalanced event::event_unmapped() call. perf_mmap_close() undoes the reference counts and eventually frees buffers.

• https://git.kernel.org/stable/c/831e1c90a5d72e6977a57c44f47c46b73a438695Patch
• https://git.kernel.org/stable/c/a9025f73c88d9d6e125743a43afc569da3ce5328Patch
• https://git.kernel.org/stable/c/f74b9f4ba63ffdf597aaaa6cad7e284cb8e04820Patch

Published

Aug 19, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38559In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3856A vulnerability was found in xxyopen Novel-Plus 5.1.0. It ha…9.8
• CVE-2025-38560In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38561In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2025-38562In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38563In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38565In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38566In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2025-38567In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2025-38568In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38569In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3857When reading binary Ion data through Amazon.IonDotnet using …8.7