CVE-2025-38636
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38636
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38636.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38636
- Downstream
- Published
- 2025-08-22T16:00:43.910Z
- Modified
- 2025-12-02T16:43:55.354194Z
- Summary
- rv: Use strings in da monitors tracepoints
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
rv: Use strings in da monitors tracepoints
Using DA monitors tracepoints with KASAN enabled triggers the following warning:
BUG: KASAN: global-out-of-bounds in dotraceeventraweventeventdamonitor+0xd6/0x1a0 Read of size 32 at addr ffffffffaada8980 by task ... Call Trace: <TASK> [...] dotraceeventraweventeventdamonitor+0xd6/0x1a0 ? _pfxdotraceeventraweventeventdamonitor+0x10/0x10 ? traceeventsncid+0x83/0x200 traceeventsncid+0x163/0x200 [...] The buggy address belongs to the variable: automatonsnep+0x4e0/0x5e0
This is caused by the tracepoints reading 32 bytes _array instead of _string from the automata definition. Such strings are literals and reading 32 bytes ends up in out of bound memory accesses (e.g. the next automaton's data in this case). The error is harmless as, while printing the string, we stop at the null terminator, but it should still be fixed.
Use the __string facilities while defining the tracepoints to avoid reading out of bound memory.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38636.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/0ebc70d973ce7a81826b5c4f55f743e07f5864d9
- https://git.kernel.org/stable/c/7f904ff6e58d398c4336f3c19c42b338324451f7
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38636.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-38636
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced792575348ff70e05c6040d02fce38e949ef92c37Fixed0ebc70d973ce7a81826b5c4f55f743e07f5864d9Fixed7f904ff6e58d398c4336f3c19c42b338324451f7