CVE-2025-39689
Last modified
CVE-2025-39689 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of set_ftrace_filter and set_ftrace_notrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy of the hash, the reader keeps the pointer to the filter hashes. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of set_ftrace_filter and set_ftrace_notrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy of the hash, the reader keeps the pointer to the filter hashes. This is problematic because this pointer is static across function calls that release the locks that can update the global tracer hashes. This can cause UAF and similar bugs. Allocate and copy the hash for reading the filter files like it is done for the writers. This not only fixes UAF bugs, but also makes the code a bit simpler as it doesn't have to differentiate when to free the iterator's hash between writers and readers.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Linux | Linux Kernel | >= 4.12, < 5.4.297 | — |
| Linux | Linux Kernel | >= 5.5, < 5.10.241 | — |
| Linux | Linux Kernel | >= 5.11, < 5.15.190 | — |
| Linux | Linux Kernel | >= 5.16, < 6.1.149 | — |
| Linux | Linux Kernel | >= 6.2, < 6.6.103 | — |
| Linux | Linux Kernel | >= 6.7, < 6.12.44 | — |
| Linux | Linux Kernel | >= 6.13, < 6.16.4 | — |
| Linux | Linux Kernel | 6.17 | Rc1 |
| Debian | Debian Linux | 11.0 | — |
References
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlMailing List, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-39689?
How severe is CVE-2025-39689?
How do I fix CVE-2025-39689?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-39683In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2025-39684In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-39685In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2025-39686In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2025-39687In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2025-39688In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-3969A vulnerability was found in codeprojects News Publishing Si…9.8
- CVE-2025-39690In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-39691In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2025-39692In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-39693In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-39694In the Linux kernel, the following vulnerability has been re…5.5
Are you affected by CVE-2025-39689?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST