CVE-2025-37938

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the trace event verifier. The verifier checks the formats of trace events to ensure they do not point to memory that is not in the trace event itself or in data that will never be freed. If an event references data that was allocated when the event triggered and that same data is freed before the event is read, then the kernel can crash by reading freed memory. The issue is specifically related to event formats that use %*p.., which the verifier would previously ignore, potentially leading to dangerous situations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.