{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:12",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.12.100-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.5-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  perf/x86/amd/core: Avoid enabling BRS from the SVM reload path  Branch Sampling (BRS) and Last Branch Record (LBR) are mutually exclusive hardware features, and users of both are tracked via cpuc-\u003elbr_users.  When SVM is toggled on a CPU, the host perf events are reprogrammed to update the HostOnly filter bit (set when virtualization is enabled, cleared when it is disabled). On PerfMonV2-capable processors, this reprogramming is performed by calling amd_pmu_enable_all() to rewrite the event selectors. However, amd_pmu_enable_all() also calls amd_brs_enable_all(), which enables BRS whenever cpuc-\u003elbr_users \u003e 0. Having active LBR events satisfies this gating on processors that have LBR but not BRS. The kernel then tries to set the BRS enable bit in DebugExtnCfg (MSR 0xc000010f). Since that bit is deprecated on such hardware, the write results in a #GP:    Call Trace:    \u003cIRQ\u003e    amd_pmu_enable_all+0x1d/0x90    amd_pmu_disable_virt+0x62/0xb0    kvm_arch_disable_virtualization_cpu+0xa/0x40 [kvm]    hardware_disable_nolock+0x1a/0x30 [kvm]    __flush_smp_call_function_queue+0x9b/0x410    __sysvec_call_function+0x18/0xc0    sysvec_call_function+0x69/0x90    \u003c/IRQ\u003e    \u003cTASK\u003e    asm_sysvec_call_function+0x16/0x20   RIP: 0010:cpuidle_enter_state+0xc4/0x450    ? cpuidle_enter_state+0xb7/0x450    cpuidle_enter+0x29/0x40    cpuidle_idle_call+0xf5/0x160    do_idle+0x7b/0xe0    cpu_startup_entry+0x26/0x30    start_secondary+0x115/0x140    secondary_startup_64_no_verify+0x194/0x19b    \u003c/TASK\u003e  Fix this by ensuring that BRS is not enabled from the event selector reprogramming path even when cpuc-\u003elbr_users \u003e 0.",
  "id": "DEBIAN-CVE-2026-72325",
  "modified": "2026-09-14T16:47:31.601760990Z",
  "published": "2026-08-15T06:22:05.547Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-72325"
    }
  ],
  "upstream": [
    "CVE-2026-72325"
  ]
}