CVE-2025-39683

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0

Description A flaw exists in the Linux kernel related to tracing functionality. Specifically, insufficient bounds checking when handling strings longer than FTRACE BUFF MAX within the ftrace process regex function, triggered by a failure in trace get user, can lead to an out-of-bounds read in strsep. This issue manifests as a KASAN alarm during string processing within the tracing subsystem.

Recommendations Update to Linux kernel version 6.16.0 or later to address this issue.