Slab Out-of-Bounds Vulnerability in Linux Kernel's OS Noise Tracing Feature

CVE-2025-39974

What is CVE-2025-39974?

A vulnerability exists in the Linux Kernel's OS noise tracing functionality, specifically related to the handling of the cpulist parameter during write operations. When improperly formatted input is provided, such as a cpulist that lacks a proper null terminator, it can lead to a slab out-of-bounds access. This flaw can be exploited, resulting in potential memory corruption and instability in the system. The issue was addressed by ensuring that the cpulist parameter is terminated correctly, thus safeguarding against such access violations.

References