CVE-2025-39689: ftrace: Also allocate and copy hash for reading of filter files

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• debian debian linux11.0
• linux linux kernel5.5 and later · before 5.10.241
• linux linux kernel5.11 and later · before 5.15.190
• linux linux kernel5.16 and later · before 6.1.149
• linux linux kernel4.12 and later · before 5.4.297
• linux linux kernel6.7 and later · before 6.12.44
• linux linux kernel6.13 and later · before 6.16.4
• linux linux kernel6.2 and later · before 6.6.103
• linux linux kernel6.17

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • 4.12affected
  • c20489dad156dd9919ebd854bbace46dbd2576a3 and later · before 12064e1880fc9202be75ff668205b1703d92f74faffected · git
  • c20489dad156dd9919ebd854bbace46dbd2576a3 and later · before c4cd93811e038d19f961985735ef7bb128078dfbaffected · git
  • c20489dad156dd9919ebd854bbace46dbd2576a3 and later · before e0b6b223167e1edde5c82edf38e393c06eda1f13affected · git
  • c20489dad156dd9919ebd854bbace46dbd2576a3 and later · before a40c69f4f1ed96acbcd62e9b5ff3a596f0a91309affected · git
  • c20489dad156dd9919ebd854bbace46dbd2576a3 and later · before 3b114a3282ab1a12cb4618a8f45db5d7185e784aaffected · git
  • c20489dad156dd9919ebd854bbace46dbd2576a3 and later · before c591ba1acd081d4980713e47869dd1cc3d963d19affected · git
  • c20489dad156dd9919ebd854bbace46dbd2576a3 and later · before 64db338140d2bad99a0a8c6a118dd60b3e1fb8cbaffected · git
  • c20489dad156dd9919ebd854bbace46dbd2576a3 and later · before bfb336cf97df7b37b2b2edec0f69773e06d11955affected · git
  • before 4.12not affected · semver

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV
  90Now
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now

Published before and after this one in the same product

• ← EarlierCVE-2025-39686Sep 5, 2025 · comedi: Make insn_rw_emulate_bits() do insn->n samples
  31Monitor
• ← EarlierCVE-2025-39687Sep 5, 2025 · iio: light: as73211: Ensure buffer holes are zeroed
  28Monitor
• Later →CVE-2025-39690Sep 5, 2025 · iio: accel: sca3300: fix uninitialized iio scan data
  22Monitor

Root cause

After a memory region is freed, another reference pointing to it is still used. By then, the same region may have been allocated for different data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1free(dev->buf);2/* ... another thread is still running ... */3process(dev->buf);

1lock(&dev->lock);2free(dev->buf);3dev->buf = NULL;4unlock(&dev->lock);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.