CVE-2025-38322: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability in the Linux kernel was identified and tracked as CVE-2025-38322, discovered on July 10, 2025. The issue specifically affects the performance monitoring subsystem on Intel processors, particularly in the iclupdatetopdown_event() function (NVD).

The vulnerability manifests as a hard-lockup crash on RaptorLake machines, specifically triggering a general protection fault. The issue occurs when the iclupdatetopdownevent() function is incorrectly invoked on E-core CPUs (CPUs 16-23) that don't support the perf metrics feature. This was introduced as a regression from commit f9bdf1f95339, where istopdownevent() function was mistakenly used instead of istopdown_count() to check if topdown functions for the perf metrics feature should be invoked (NVD).

The vulnerability can cause system crashes on affected systems, particularly those running RaptorLake processors with E-cores. When triggered, it results in a hard-lockup crash with a general protection fault (NVD).

The vulnerability has been resolved in various Linux kernel versions. According to the Debian Security Tracker, the fix has been implemented in version 5.10.223-1 for the bullseye release, while other versions such as bookworm, trixie, and sid remain vulnerable and await updates (Debian Tracker).