Kernel Vulnerability in Linux for Trace Event Management by Linux Foundation

CVE-2025-38539

What is CVE-2025-38539?

A race condition has been identified in the Linux kernel related to the management of trace events during module loading. When multiple modules attempt to load simultaneously, they can interfere with the ftrace_events list, potentially leading to corruption and instability in the kernel. This occurs during the modification of the printk format strings associated with these trace events. To mitigate this issue, a write lock on the trace_event_sem semaphore should be acquired during event addition, ensuring consistent access to shared resources and preventing kernel crashes.

References