PT-2025-40088
CVE-2025-39914
·
Published
2025-09-08
·
Updated
2026-10-13
Description by
CVSS 2.0
6.0
MediumMetricsAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 6.14.0-rc5 and earlier
Description
The Linux kernel tracing subsystem contained a flaw where a warning message was triggered during chunk allocation failures within the
trace pid write function. This issue was identified through Syzkaller testing, which induced a fault injection leading to a warning during tracepoint addition. Specifically, the issue arises when a fault is injected during the allocation of memory for the trace pid list, potentially causing a double registration of the same tracepoint. This occurs when the system is under stress and does not necessarily indicate a crash, but the warning message was considered undesirable. The root cause is a lack of failure handling in the trace pid list set function.Recommendations
Update to a newer version of the Linux kernel that includes the fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾