Linux Kernel Tracing Vulnerability in Google's Compute Engine

CVE-2025-39914

What is CVE-2025-39914?

A vulnerability was found in the Linux kernel's tracing subsystem that could lead to complications during trace point allocation. Specifically, when using syzkaller to inject a fault during the allocation process, warning messages may appear, suggesting that the system is experiencing a double registration of the same trace point. This situation arises when the chunk allocation fails under certain conditions, potentially leading to unexpected behavior. To mitigate this, enhancements were made to the failure handling logic in the trace_pid_list_set function, ensuring a more graceful management of trace points and reducing warning interference in system operations.

References