CVE-2025-39829

CVE-2025-39829

Medium · published September 16, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

trace/fgraph: Fix the warning caused by missing unregister notifier

This warning was triggered during testing on v6.16:

notifier callback ftrace_suspend_notifier_call already registered

WARNING: CPU: 2 PID: 86 at kernel/notifier.c:23 notifier_chain_register+0x44/0xb0

...

Call Trace:

<TASK>

blocking_notifier_chain_register+0x34/0x60

register_ftrace_graph+0x330/0x410

ftrace_profile_write+0x1e9/0x340

vfs_write+0xf8/0x420

? filp_flush+0x8a/0xa0

? filp_close+0x1f/0x30

? do_dup2+0xaf/0x160

ksys_write+0x65/0xe0

do_syscall_64+0xa4/0x260

entry_SYSCALL_64_after_hwframe+0x77/0x7f

When writing to the function_profile_enabled interface, the notifier was

not unregistered after start_graph_tracing failed, causing a warning the

next time function_profile_enabled was written.

Fixed by adding unregister_pm_notifier in the exception path.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Published
2025-09-16T17:16Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.30, < 6.12.456.12.45
linux/linux_kernel≥ 6.13, < 6.16.56.16.5
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 16 SEP 13:00Z
    trace/fgraph: Fix the warning caused by missing unregister notifier
    cvelistv5