In the Linux kernel, the following vulnerability has been resolved:
tracing: Add downwrite(traceevent_sem) when adding trace event
When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values.
If two modules are loaded at the same time, the adding of the event to the ftrace_events list can corrupt the walking of the list in the code that is modifying the printk format strings and crash the kernel.
The addition of the event should take the traceeventsem for write while it adds the new event.
Also add a lockdepassertheld() on that semaphore in _traceaddeventdirs() as it iterates the list.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/ee626f5d79d5817bb21d6f048dc0da4c4e383443/cves/2025/38xxx/CVE-2025-38539.json"
}[
{
"signature_type": "Function",
"id": "CVE-2025-38539-0ef2af2c",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca60064ea03f14e06c763de018403cb56ba3207d",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2025-38539-14c2080a",
"digest": {
"function_hash": "232558593154671963136257630701354549336",
"length": 211.0
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db45632479ceecb669612ed8dbce927e3c6279fc",
"deprecated": false
},
{
"signature_type": "Line",
"id": "CVE-2025-38539-18d77721",
"digest": {
"line_hashes": [
"148312158308727640898210362654977141878",
"208262418498607086979138934710458353918",
"79848857473848848741051512537608905393",
"87500381370810858892039287533824816790",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70fecd519caad0c1741c3379d5348c9000a5b29d",
"deprecated": false
},
{
"signature_type": "Line",
"id": "CVE-2025-38539-25cf0dda",
"digest": {
"line_hashes": [
"148312158308727640898210362654977141878",
"208262418498607086979138934710458353918",
"79848857473848848741051512537608905393",
"87500381370810858892039287533824816790",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5e8acc14dcb314a9b61ff19dcd9fdd0d88f70df",
"deprecated": false
},
{
"signature_type": "Line",
"id": "CVE-2025-38539-2937d126",
"digest": {
"line_hashes": [
"148312158308727640898210362654977141878",
"208262418498607086979138934710458353918",
"79848857473848848741051512537608905393",
"87500381370810858892039287533824816790",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca60064ea03f14e06c763de018403cb56ba3207d",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2025-38539-3843e54e",
"digest": {
"function_hash": "80159464333871757588795222627330870583",
"length": 301.0
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70fecd519caad0c1741c3379d5348c9000a5b29d",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2025-38539-43950efc",
"digest": {
"function_hash": "80159464333871757588795222627330870583",
"length": 301.0
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca60064ea03f14e06c763de018403cb56ba3207d",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2025-38539-618ad261",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70fecd519caad0c1741c3379d5348c9000a5b29d",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2025-38539-71a6b081",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db45632479ceecb669612ed8dbce927e3c6279fc",
"deprecated": false
},
{
"signature_type": "Line",
"id": "CVE-2025-38539-bbfd296c",
"digest": {
"line_hashes": [
"148312158308727640898210362654977141878",
"218966418196344446362224513270480034882",
"327622349550561591681533458488586257609",
"157801909083352476279629976944686108469",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db45632479ceecb669612ed8dbce927e3c6279fc",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2025-38539-d5416e7d",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5e8acc14dcb314a9b61ff19dcd9fdd0d88f70df",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2025-38539-f96a959c",
"digest": {
"function_hash": "80159464333871757588795222627330870583",
"length": 301.0
},
"signature_version": "v1",
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5e8acc14dcb314a9b61ff19dcd9fdd0d88f70df",
"deprecated": false
}
]