CVE-2018-11232: The etm_setup_aux function in drivers/hwtracing/coresight/coresight-etm-perf.c in the Linux kernel before 4...

Security readout for executives and security teams

CVE-2018-11232 is a Linux kernel denial-of-service flaw. A bug in CoreSight ETM perf tracing can cause a kernel panic, making the affected system unavailable. The sources do not show data theft, privilege escalation, remote code execution, or active exploitation. Exposure is most relevant to Linux systems running kernels before 4.10.2 where CoreSight ETM perf tracing is present or usable. The provided sources do not identify downstream vendor packages, distributions, required privileges, or hardware-specific scope beyond the upstream Linux kernel file path. Treat this as a targeted availability risk for older Linux systems, not a broad emergency. Prioritize internet-facing, production, embedded, or difficult-to-restart systems first, especially where old kernels remain in service. No source indicates active exploitation. Mitigation focus: Upgrade affected Linux kernels to 4.10.2 or later where feasible.; Apply downstream vendor kernel updates that include the upstream fixed commit.; Prioritize systems where CoreSight ETM perf tracing is present or operationally exposed..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.