Tracker / CVE-2025-37845
CVE-2025-37845
High 7.8
In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 ("tracing: tprobe-events: Fix leakage of module refcount") moved try_module_get() from __find_tracepoint_module_cb() to find_tracepoint() caller, but that introduced a possible UAF because the module can be unloaded before try_module_get(). In this case, the module object should be freed too. Thus, try_module_get() does not only fail but may access to the freed object. To avoid that, try_module_get() in __find_tracepoint_module_cb() again.
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 6.12.21 → 6.12.24 |
| linux | linux_kernel · 6.13.9 → 6.13.12 |
| linux | linux_kernel · 6.14.1 → 6.14.3 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.