Skip to content
Heist/ feed
High

tracing: Add down_write(trace_event_sem) when adding trace event

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: tracing: Add down_write(trace_event_sem) when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values. If two modules are loaded at the same time, the adding of the event to the ftrace_events list can corrupt the walking of the list in the code that is modifying the printk format strings and crash the kernel. The addition of the event should take the trace_event_sem for write while it adds the new event. Also add a lockdep_assert_held() on that semaphore in __trace_add_event_dirs() as it iterates the list.

Announced Source revision 1
Original source ↗

CVE-2025-38539

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2025-38539

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "110bf2b764eb6026b868d84499263cb24b1bcc8d",
        "lessThan": "e70f5ee4c8824736332351b703c46f9469ed7f6c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "110bf2b764eb6026b868d84499263cb24b1bcc8d",
        "lessThan": "db45632479ceecb669612ed8dbce927e3c6279fc",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "110bf2b764eb6026b868d84499263cb24b1bcc8d",
        "lessThan": "ca60064ea03f14e06c763de018403cb56ba3207d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "110bf2b764eb6026b868d84499263cb24b1bcc8d",
        "lessThan": "7803b28c9aa8d8bd4e19ebcf5f0db9612b0f333b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "110bf2b764eb6026b868d84499263cb24b1bcc8d",
        "lessThan": "6bc94f20a4c304997288f9a45278c9d0c06987d3",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "110bf2b764eb6026b868d84499263cb24b1bcc8d",
        "lessThan": "33e20747b47ddc03569b6bc27a2d6894c1428182",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "110bf2b764eb6026b868d84499263cb24b1bcc8d",
        "lessThan": "70fecd519caad0c1741c3379d5348c9000a5b29d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "110bf2b764eb6026b868d84499263cb24b1bcc8d",
        "lessThan": "b5e8acc14dcb314a9b61ff19dcd9fdd0d88f70df",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "kernel/trace/trace_events.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "2.6.31"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "2.6.31",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.4.297",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.241",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.190",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.147",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.100",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.40",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.15.8",
        "versionType": "semver",
        "lessThanOrEqual": "6.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.16",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "kernel/trace/trace_events.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2025-38539

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#30590 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement