Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-39813— ftrace: Fix potential warning in trace_printk_seq during ftrace_dump

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于并发访问期间未正确处理跟踪缓冲区，可能导致警告触发。

AI Predicted 5.5 Difficulty: Theoretical EPSS 0.12% · P2

Possible ATT&CK Techniques 1 AI

T1083 · File and Directory Discovery

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux d769041f865330034131525ee6a7f72eb4af2a24< f299353e7ccbcc5c2ed8993c48fbe7609cbe729a affected
d769041f865330034131525ee6a7f72eb4af2a24< 5ab0ec206deb99eb3baf8f1d7602aeaa91dbcc85 affected
d769041f865330034131525ee6a7f72eb4af2a24< a6f0f8873cc30fd4543b09adf03f7f51d293f0e6 affected
d769041f865330034131525ee6a7f72eb4af2a24< e80ff23ba8bdb0f41a1afe2657078e4097d13a9a affected
d769041f865330034131525ee6a7f72eb4af2a24< 28c8fb7ae2ad27d81c8de3c4fe608c509f6a18aa affected
d769041f865330034131525ee6a7f72eb4af2a24< ced94e137e6cd5e79c65564841d3b7695d0f5fa3 affected
d769041f865330034131525ee6a7f72eb4af2a24< fbd4cf7ee4db65ef36796769fe978e9eba6f0de4 affected
d769041f865330034131525ee6a7f72eb4af2a24< 4013aef2ced9b756a410f50d12df9ebe6a883e4a affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-39813

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one() concurrently with reading trace_pipe, a WARN_ON_ONCE() in trace_printk_seq() can be triggered due to a race condition. The issue occurs because: CPU0 (ftrace_dump) CPU1 (reader) echo z > /proc/sysrq-trigger !trace_empty(&iter) trace_iterator_reset(&iter) <- len = size = 0 cat /sys/kernel/tracing/trace_pipe trace_find_next_entry_inc(&iter) __find_next_entry ring_buffer_empty_cpu <- all empty return NULL trace_printk_seq(&iter.seq) WARN_ON_ONCE(s->seq.len >= s->seq.size) In the context between trace_empty() and trace_find_next_entry_inc() during ftrace_dump, the ring buffer data was consumed by other readers. This caused trace_find_next_entry_inc to return NULL, failing to populate `iter.seq`. At this point, due to the prior trace_iterator_reset, both `iter.seq.len` and `iter.seq.size` were set to 0. Since they are equal, the WARN_ON_ONCE condition is triggered. Move the trace_printk_seq() into the if block that checks to make sure the return value of trace_find_next_entry_inc() is non-NULL in ftrace_dump_one(), ensuring the 'iter.seq' is properly populated before subsequent operations.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于并发访问期间未正确处理跟踪缓冲区，可能导致警告触发。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux d769041f865330034131525ee6a7f72eb4af2a24 ~ f299353e7ccbcc5c2ed8993c48fbe7609cbe729a -
Linux Linux 2.6.28 -

II. Public POCs for CVE-2025-39813

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-39813

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-09-16 · 115 CVEs total

CVE-2022-50350 9.8 CRITICAL scsi: target: iscsi: Fix a race condition between login_work and the login thread
CVE-2025-39806 8.8 HIGH HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
CVE-2023-53315 8.8 HIGH wifi: ath11k: Fix SKB corruption in REO destination ring
CVE-2023-53305 8.8 HIGH Bluetooth: L2CAP: Fix use-after-free
CVE-2025-39827 8.8 HIGH net: rose: include node references in rose_neigh refcount
CVE-2025-39826 8.8 HIGH net: rose: convert 'use' field to refcount_t
CVE-2023-53322 8.8 HIGH scsi: qla2xxx: Wait for io return on terminate rport
CVE-2023-53297 8.8 HIGH Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
CVE-2025-39809 8.4 HIGH HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length
CVE-2023-53333 8.2 HIGH netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
CVE-2023-53314 7.8 HIGH fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
CVE-2025-39815 7.8 HIGH RISC-V: KVM: fix stack overrun when loading vlenb
CVE-2023-53286 7.8 HIGH RDMA/mlx5: Return the firmware result upon destroying QP/RQ
CVE-2025-39818 7.8 HIGH HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save
CVE-2023-53311 7.8 HIGH nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
CVE-2022-50341 7.8 HIGH cifs: fix oops during encryption
CVE-2025-39810 7.8 HIGH bnxt_en: Fix memory corruption when FW resources change during ifdown
CVE-2025-39825 7.8 HIGH smb: client: fix race with concurrent opens in rename(2)
CVE-2023-53263 7.8 HIGH drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create
CVE-2022-50339 7.8 HIGH Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()

Showing top 20 of 115 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-39813

No comments yet

Leave a comment