DEBIAN-CVE-2022-50255

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix reading strings from synthetic events The follow commands caused a crash: cd /sys/kernel/tracing echo 's:open char file' dynamicevents echo 'hist:keys=commonpid:file=filename:onchange$file.traceopen,$file'...

CVE-2023-53167

CVE-2023-53167: In the Linux kernel, tracing_err_log_open() can dereference file->private_data if opened with write permissions and then lseek is used, causing a kernel panic via mutex_lock -> seq_lseek. A fix was applied to tracing: Fix null pointer dereference in tracing_err_log_open() fo...

CVE-2023-53167 tracing: Fix null pointer dereference in tracing_err_log_open()

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix null pointer dereference in tracingerrlogopen Fix an issue in function 'tracingerrlogopen'. The function doesn't call 'seqopen' if the file is opened only with write permissions, which results in 'file-privatedata'...

CVE-2025-38539

In the Linux kernel, the following vulnerability has been resolved: tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values...

DEBIAN-CVE-2025-38539

In the Linux kernel, the following vulnerability has been resolved: tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values...

CVE-2025-38539

In the Linux kernel, the following vulnerability has been resolved: tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values...

CVE-2025-38539

In the Linux kernel, the following vulnerability has been resolved: tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values...

CVE-2025-38539 tracing: Add down_write(trace_event_sem) when adding trace event

In the Linux kernel, the following vulnerability has been resolved: tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values...

CVE-2025-38539

CVE-2025-38539 : Linux kernel tracing fix. When a module loads and adds trace events, it now takes the trace_event_sem for write while adding the event, preventing possible corruption of the ftrace_events list if two modules load simultaneously. The patch also adds a lockdep_assert_held() on the ...

Linux Distros Unpatched Vulnerability : CVE-2021-3679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a...

ftrace: Fix UAF when lookup kallsym after ftrace disabled

...

SUSE CVE-2025-38493

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix crash in timerlatdumpstack We have observed kernel panics when using timerlat with stack saving, with the following dmesg output: memcpy: detected buffer overflow: 88 byte write of buffer size 0 WARNING: CPU:...

The vulnerability in the kernel/trace/bpftrace.c module of the Linux operating system’s subsystem BPF allows a hacker to cause a service failure.

The vulnerability in the kernel/trace/bpftrace.c module of the Linux operating system’s subsystem BPF is related to improper resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-38327 fgraph: Do not enable function_graph tracer when setting funcgraph-args

In the Linux kernel, the following vulnerability has been resolved: fgraph: Do not enable functiongraph tracer when setting funcgraph-args When setting the funcgraph-args option when function graph tracer is net enabled, it incorrectly enables it. Worse, it unregisters itself when it was never...

CVE-2025-38285

CVE-2025-38285 – Linux kernel : The issue stems from a WARN_ON_ONCE in the BPF tracing path (get_bpf_raw_tp_regs) triggered by a corner case involving trace_mmap_lock and stack maps. The issue surfaces during BPF stack retrieval and is reported in kernel/bpf_trace.c, with inline calls in bpf_get_...

The vulnerability of the blkTraceRemoveQueue() function in the kernel/trace/blktrace.c module, which supports kernel tracing in Linux operating systems, allows a hacker to gain access to protected information.

The vulnerability of the blkTraceRemoveQueue function in the kernel/trace/blktrace.c module, which supports kernel tracing in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to gain access to protected...

The vulnerability of the dyn_event_release() function in the kernel/trace/trace_dynevent.c module, which supports Linux kernel tracing, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dyneventrelease function in the kernel/trace/tracedynevent.c module, which supports kernel tracing in Linux operating systems, is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Fixed a use-after-free in printgraphfunctionflags during tracer switching. Kairui reported a Use-After-Free issue in printgraphfunctionflags during ftrace stress testing 1. This issue can be reproduced by putting a...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Fixed an issue where corrupted data was written to the “hist” field, potentially affecting the “namedTriggers” list. The following commands cause a crash: cd /sys/kernel/tracing/events/rcu/rcucallback echo...

DEBIAN-CVE-2025-37938

In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%p.." The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that will never be freed. I...