Function Graph Tracer Vulnerability in Linux Kernel

CVE-2025-38327

What is CVE-2025-38327?

A vulnerability exists in the Linux kernel's function graph tracer where enabling the funcgraph-args option does not function as intended. Instead of merely recording the arguments, it mistakenly enables the function graph tracer even when it should remain disabled. This results in a faulty state where it unregisters itself without proper registration. When a second attempt is made to enable the tracer, it creates a registration conflict, leading to kernel warnings and potential instability in the tracing mechanism.

References