CVE-2025-37845

tracing: fprobe events: Fix possible UAF on modules

HIGH
7.8
CVSS Score
Published: May 9, 2025 at 06:41 AM UTC
Updated: August 5, 2026 at 12:44 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 ("tracing: tprobe-events: Fix leakage of module refcount") moved try_module_get() from __find_tracepoint_module_cb() to find_tracepoint() caller, but that introduced a possible UAF because the module can be unloaded before try_module_get(). In this case, the module object should be freed too. Thus, try_module_get() does not only fail but may access to the freed object. To avoid that, try_module_get() in __find_tracepoint_module_cb() again.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.12.21 ≤ v < 6.12.246.13.9 ≤ v < 6.13.126.14 ≤ v < 6.14.36.14 ≤ v < 6.156.14.1 ≤ v < 6.14.36.12.216.13.96.146.15 rc171c9cf87776eaa556fc0a0a060df94200e1f521c9db2b8cf4ea07b579db588e0353d5680f5d1f071ac91052f0ae5be9e46211ba92cc31c0e3b0a933a
Vendor states this is fixed in 626f01f4d26e8cf92e69c1df53036153c8e98a20 (fixed)
Vendor states this is fixed in 868df4eb784c3ccc7e4340a9ea993cbbedca167e (fixed)
Vendor states this is fixed in a27d2de2472b1cc7d582ab405d1d5832a80481de (fixed)
Vendor states this is fixed in dd941507a9486252d6fcf11814387666792020f3 (fixed)
Vendor states this is fixed in 6.12.24 (unaffected)
Vendor states this is fixed in 6.13.12 (unaffected)
Vendor states this is fixed in 6.14 (unaffected)
Vendor states this is fixed in 6.14.3 (unaffected)
Vendor states this is fixed in 6.15 (unaffected)

References (4)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/626f01f4d26e8cf92e69c1df53036153c8e98a20
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/868df4eb784c3ccc7e4340a9ea993cbbedca167e
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a27d2de2472b1cc7d582ab405d1d5832a80481de
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/dd941507a9486252d6fcf11814387666792020f3

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card