)]}'
{
  "commit": "349adb10644be95ea6fb0655ecd045ebe57b91c1",
  "tree": "6675cc191501d4bdb20d6a3fa9bd4b651bc29f4e",
  "parents": [
    "629e4e2cbeec3a48e6d76be93a2ef4397f55cd49"
  ],
  "author": {
    "name": "Kan Liang",
    "email": "kan.liang@linux.intel.com",
    "time": "Thu Jul 24 00:11:50 2025 -0400"
  },
  "committer": {
    "name": "Kevin Berry",
    "email": "kpberry@google.com",
    "time": "Fri Sep 05 15:19:31 2025 -0700"
  },
  "message": "perf/x86/intel: Fix crash in icl_update_topdown_event()\n\n[ Upstream commit b0823d5fbacb1c551d793cbfe7af24e0d1fa45ed ]\n\nThe perf_fuzzer found a hard-lockup crash on a RaptorLake machine:\n\n  Oops: general protection fault, maybe for address 0xffff89aeceab400: 0000\n  CPU: 23 UID: 0 PID: 0 Comm: swapper/23\n  Tainted: [W]\u003dWARN\n  Hardware name: Dell Inc. Precision 9660/0VJ762\n  RIP: 0010:native_read_pmc+0x7/0x40\n  Code: cc e8 8d a9 01 00 48 89 03 5b cd cc cc cc cc 0f 1f ...\n  RSP: 000:fffb03100273de8 EFLAGS: 00010046\n  ....\n  Call Trace:\n    \u003cTASK\u003e\n    icl_update_topdown_event+0x165/0x190\n    ? ktime_get+0x38/0xd0\n    intel_pmu_read_event+0xf9/0x210\n    __perf_event_read+0xf9/0x210\n\nCPUs 16-23 are E-core CPUs that don\u0027t support the perf metrics feature.\nThe icl_update_topdown_event() should not be invoked on these CPUs.\n\nIt\u0027s a regression of commit:\n\n  f9bdf1f95339 (\"perf/x86/intel: Avoid disable PMU if !cpuc-\u003eenabled in sample read\")\n\nThe bug introduced by that commit is that the is_topdown_event() function\nis mistakenly used to replace the is_topdown_count() call to check if the\ntopdown functions for the perf metrics feature should be invoked.\n\nFix it.\n\nBUG\u003db/441916209\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2025-38322 in the Linux kernel.\n\ncos-patch: security-moderate\nFixes: f9bdf1f95339 (\"perf/x86/intel: Avoid disable PMU if !cpuc-\u003eenabled in sample read\")\nCloses: https://lore.kernel.org/lkml/352f0709-f026-cd45-e60c-60dfd97f73f3@maine.edu/\nReported-by: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nChange-Id: I06f62a6e4e3723b9d72dba69f2127e9548142a86\nSigned-off-by: Kan Liang \u003ckan.liang@linux.intel.com\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nTested-by: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nCc: stable@vger.kernel.org # v6.15+\nLink: https://lore.kernel.org/r/20250612143818.2889040-1-kan.liang@linux.intel.com\n[ omitted PEBS check ]\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Kevin Berry \u003ckpberry@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/110626\nReviewed-by: Shuo Yang \u003cgshuoy@google.com\u003e\nReviewed-by: Miri Amarilio \u003cmirilio@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b380fc5ea0887074a4609d96d06dede86b45fcca",
      "old_mode": 33188,
      "old_path": "arch/x86/events/intel/core.c",
      "new_id": "2cb5b1f715b620f25763619cdefffe33b1b87788",
      "new_mode": 33188,
      "new_path": "arch/x86/events/intel/core.c"
    }
  ]
}