In the Linux kernel, the following vulnerability has been resolved:
tracing: Add downwrite(traceevent_sem) when adding trace event
When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values.
If two modules are loaded at the same time, the adding of the event to the ftrace_events list can corrupt the walking of the list in the code that is modifying the printk format strings and crash the kernel.
The addition of the event should take the traceeventsem for write while it adds the new event.
Also add a lockdepassertheld() on that semaphore in _traceaddeventdirs() as it iterates the list.
[
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6bc94f20a4c304997288f9a45278c9d0c06987d3",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-0751f978"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e70f5ee4c8824736332351b703c46f9469ed7f6c",
"digest": {
"threshold": 0.9,
"line_hashes": [
"148312158308727640898210362654977141878",
"218966418196344446362224513270480034882",
"327622349550561591681533458488586257609",
"157801909083352476279629976944686108469",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
]
},
"signature_type": "Line",
"id": "CVE-2025-38539-08274583"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca60064ea03f14e06c763de018403cb56ba3207d",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-0ef2af2c"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db45632479ceecb669612ed8dbce927e3c6279fc",
"digest": {
"function_hash": "232558593154671963136257630701354549336",
"length": 211.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-14c2080a"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70fecd519caad0c1741c3379d5348c9000a5b29d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"148312158308727640898210362654977141878",
"208262418498607086979138934710458353918",
"79848857473848848741051512537608905393",
"87500381370810858892039287533824816790",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
]
},
"signature_type": "Line",
"id": "CVE-2025-38539-18d77721"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33e20747b47ddc03569b6bc27a2d6894c1428182",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-1f33a214"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5e8acc14dcb314a9b61ff19dcd9fdd0d88f70df",
"digest": {
"threshold": 0.9,
"line_hashes": [
"148312158308727640898210362654977141878",
"208262418498607086979138934710458353918",
"79848857473848848741051512537608905393",
"87500381370810858892039287533824816790",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
]
},
"signature_type": "Line",
"id": "CVE-2025-38539-25cf0dda"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca60064ea03f14e06c763de018403cb56ba3207d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"148312158308727640898210362654977141878",
"208262418498607086979138934710458353918",
"79848857473848848741051512537608905393",
"87500381370810858892039287533824816790",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
]
},
"signature_type": "Line",
"id": "CVE-2025-38539-2937d126"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70fecd519caad0c1741c3379d5348c9000a5b29d",
"digest": {
"function_hash": "80159464333871757588795222627330870583",
"length": 301.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-3843e54e"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca60064ea03f14e06c763de018403cb56ba3207d",
"digest": {
"function_hash": "80159464333871757588795222627330870583",
"length": 301.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-43950efc"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33e20747b47ddc03569b6bc27a2d6894c1428182",
"digest": {
"function_hash": "80159464333871757588795222627330870583",
"length": 301.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-61513131"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@70fecd519caad0c1741c3379d5348c9000a5b29d",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-618ad261"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db45632479ceecb669612ed8dbce927e3c6279fc",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-71a6b081"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6bc94f20a4c304997288f9a45278c9d0c06987d3",
"digest": {
"function_hash": "80159464333871757588795222627330870583",
"length": 301.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-7688bb75"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7803b28c9aa8d8bd4e19ebcf5f0db9612b0f333b",
"digest": {
"function_hash": "80159464333871757588795222627330870583",
"length": 301.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-7a56ce92"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db45632479ceecb669612ed8dbce927e3c6279fc",
"digest": {
"threshold": 0.9,
"line_hashes": [
"148312158308727640898210362654977141878",
"218966418196344446362224513270480034882",
"327622349550561591681533458488586257609",
"157801909083352476279629976944686108469",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
]
},
"signature_type": "Line",
"id": "CVE-2025-38539-bbfd296c"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33e20747b47ddc03569b6bc27a2d6894c1428182",
"digest": {
"threshold": 0.9,
"line_hashes": [
"148312158308727640898210362654977141878",
"208262418498607086979138934710458353918",
"79848857473848848741051512537608905393",
"87500381370810858892039287533824816790",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
]
},
"signature_type": "Line",
"id": "CVE-2025-38539-bfca9f63"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7803b28c9aa8d8bd4e19ebcf5f0db9612b0f333b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"148312158308727640898210362654977141878",
"208262418498607086979138934710458353918",
"79848857473848848741051512537608905393",
"87500381370810858892039287533824816790",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
]
},
"signature_type": "Line",
"id": "CVE-2025-38539-c4632903"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e70f5ee4c8824736332351b703c46f9469ed7f6c",
"digest": {
"function_hash": "232558593154671963136257630701354549336",
"length": 211.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-d522e896"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5e8acc14dcb314a9b61ff19dcd9fdd0d88f70df",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-d5416e7d"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6bc94f20a4c304997288f9a45278c9d0c06987d3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"148312158308727640898210362654977141878",
"208262418498607086979138934710458353918",
"79848857473848848741051512537608905393",
"87500381370810858892039287533824816790",
"325551910040504426625054182623375742601",
"228651809793498159237619541379300303991",
"281185879147131343917410554586291301504"
]
},
"signature_type": "Line",
"id": "CVE-2025-38539-db2fb9e9"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e70f5ee4c8824736332351b703c46f9469ed7f6c",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-f2c086b0"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__register_event"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5e8acc14dcb314a9b61ff19dcd9fdd0d88f70df",
"digest": {
"function_hash": "80159464333871757588795222627330870583",
"length": 301.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-f96a959c"
},
{
"deprecated": false,
"target": {
"file": "kernel/trace/trace_events.c",
"function": "__trace_add_event_dirs"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7803b28c9aa8d8bd4e19ebcf5f0db9612b0f333b",
"digest": {
"function_hash": "3838993450138612727155425715520257027",
"length": 252.0
},
"signature_type": "Function",
"id": "CVE-2025-38539-fe641da1"
}
]