PT-2025-40088 · Linux+3 · Linux Kernel+3
Published
2025-09-08
·
Updated
2026-05-07
·
CVE-2025-39914
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 6.14.0-rc5 and earlier
Description
The Linux kernel tracing subsystem contained a flaw where a warning message was triggered during chunk allocation failures within the
trace pid write function. This issue was identified through Syzkaller testing, which induced a fault injection leading to a warning during tracepoint addition. Specifically, the issue arises when a fault is injected during the allocation of memory for the trace pid list, potentially causing a double registration of the same tracepoint. This occurs when the system is under stress and does not necessarily indicate a crash, but the warning message was considered undesirable. The root cause is a lack of failure handling in the trace pid list set function.Recommendations
Update to a newer version of the Linux kernel that includes the fix for this issue.
Exploit
Fix
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Ubuntu