CVE-2025-39689 (CNNVD-202509-763)
中文标题:
Linux kernel 安全漏洞
英文标题:
ftrace: Also allocate and copy hash for reading of filter files
漏洞描述
中文描述:
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于ftrace模块在读取过滤器文件时未分配和复制哈希表。
英文描述:
In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of set_ftrace_filter and set_ftrace_notrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy of the hash, the reader keeps the pointer to the filter hashes. This is problematic because this pointer is static across function calls that release the locks that can update the global tracer hashes. This can cause UAF and similar bugs. Allocate and copy the hash for reading the filter files like it is done for the writers. This not only fixes UAF bugs, but also makes the code a bit simpler as it doesn't have to differentiate when to free the iterator's hash between writers and readers.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Linux | Linux | - | < 12064e1880fc9202be75ff668205b1703d92f74f | - |
cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*
|
| Linux | Linux | 4.12 | - | - |
cpe:2.3:a:linux:linux:4.12:*:*:*:*:*:*:*
|
| linux | linux_kernel | * | - | - |
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
|
| linux | linux_kernel | 6.17 | - | - |
cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*
|
| debian | debian_linux | 11.0 | - | - |
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-39689 |
2025-11-11 15:23:19 | 2025-11-11 07:40:29 |
| NVD | nvd_CVE-2025-39689 |
2025-11-11 15:01:01 | 2025-11-11 07:48:18 |
| CNNVD | cnnvd_CNNVD-202509-763 |
2025-11-11 15:12:56 | 2025-11-11 08:00:15 |
版本与语言
安全公告
变更历史
查看详细变更
- affected_products_count: 2 -> 5
查看详细变更
- vulnerability_type: 未提取 -> 其他
- severity: SeverityLevel.MEDIUM -> SeverityLevel.UNKNOWN
- cvss_score: 未提取 -> 0.0
- cnnvd_id: 未提取 -> CNNVD-202509-763
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 9 -> 2
- references_count: 8 -> 10
- data_sources: ['cve'] -> ['cve', 'nvd']