---
id: CVE-2025-68370
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  coresight: tmc: add the handle of the event to the path

  The handle is essential for retrieving the AUX_EVENT of each CPU and is
  required in perf mode
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  coresight: tmc: add the handle of the event to the path

  The handle is essential for retrieving the AUX_EVENT of each CPU and is
  required in perf mode. It has been adde…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
published: '2025-12-24'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T11:10:00.203'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68370'
references:
  - url: 'https://git.kernel.org/stable/c/aaa5abcc9d44d2c8484f779ab46d242d774cabcb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d0c9effd82f2c19b92acd07d357fac5f392d549a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/faa8f38f7ccb344ace2c1f364efc70e3a12d32f3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00141
epssPercentile: 0.02991
ingestedAt: '2026-10-13T11:23:51.153Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

coresight: tmc: add the handle of the event to the path

The handle is essential for retrieving the AUX_EVENT of each CPU and is
required in perf mode. It has been added to the coresight_path so that
dependent devices can access it from the path when needed.

The existing bug can be reproduced with:
perf record -e cs_etm//k -C 0-9 dd if=/dev/zero of=/dev/null

Showing an oops as follows:
Unable to handle kernel paging request at virtual address 000f6e84934ed19e

Call trace:
 tmc_etr_get_buffer+0x30/0x80 [coresight_tmc] (P)
 catu_enable_hw+0xbc/0x3d0 [coresight_catu]
 catu_enable+0x70/0xe0 [coresight_catu]
 coresight_enable_path+0xb0/0x258 [coresight]

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.