SB2025052135 - Improper locking in Linux kernel trace
Published: May 21, 2025 Updated: May 21, 2025
Security Bulletin ID
SB2025052135
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper locking (CVE-ID: CVE-2025-37940)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper locking within the ftrace_graph_set_hash() function in kernel/trace/ftrace.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1fce9574b9d515bcb8a75379a8053e18602424e3
- https://git.kernel.org/stable/c/42ea22e754ba4f2b86f8760ca27f6f71da2d982c
- https://git.kernel.org/stable/c/4429535acab750d963fdc3dfcc9e0eee42f4d599
- https://git.kernel.org/stable/c/5d336ac215e5c76e43ef4bca9ba699835e53e2fd
- https://git.kernel.org/stable/c/618655d54c5f8af5d57b77491d08c0f0ff77d114
- https://git.kernel.org/stable/c/72be43ff061a889c6ee648a330a42486cafa15a6
- https://git.kernel.org/stable/c/8dd7d7280357596ba63dfdb4c1725d9dd24bd42a
- https://git.kernel.org/stable/c/dd38803c9088b848c6b56f4f6d7efc4497bfde61
- https://git.kernel.org/stable/c/e5b4ae6f01d4a510d5725eca7254519a1093920d
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.293