Database/Control plane, storage & DevOps
Linux perf/x86/amd - general protection fault from a NULL event on enable: A subtle race lets cpuc
CVE-2025-68798Control plane, storage & DevOpscurated
Impact
A subtle race lets cpuc->events[idx] become NULL on AMD machines, and enabling the event then takes a general protection fault, panicking the host. Same family as the other AMD perf races: the monitoring stack crashes the machine it is monitoring.
Who can reach it
Local, through perf event scheduling. Reachable by observability agents and by tenants where perf is permitted.
What to do
Distro kernel update plus reboot.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.