Answer in brief
CVE-2025-37938 records a Unknown severity vulnerability in tracing: Verify event formats that have "%*p..". The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5013f454a352cce8e62162976026a9c472595e42 <6854c87ac823181c810f8c07489ba543260c0023 || >=5013f454a352cce8e62162976026a9c472595e42 <4d11fac941d83509be4e6a21038281d6d96da50c || >=5013f454a352cce8e62162976026a9c472595e42 <03127354027508d076073b020d3070990fd6a958 || >=5013f454a352cce8e62162976026a9c472595e42 <04b80d45ecfaf780981d6582899e3ab205e4aa08 || >=5013f454a352cce8e62162976026a9c472595e42 <c7204fd1758c0caf1938e8a59809a1fdf28a8114 || >=5013f454a352cce8e62162976026a9c472595e42 <ea8d7647f9ddf1f81e2027ed305299797299aa03 | 6854c87ac823181c810f8c07489ba543260c0023, 4d11fac941d83509be4e6a21038281d6d96da50c, 03127354027508d076073b020d3070990fd6a958, 04b80d45ecfaf780981d6582899e3ab205e4aa08, c7204fd1758c0caf1938e8a59809a1fdf28a8114, ea8d7647f9ddf1f81e2027ed305299797299aa03 |
| Linux/Linuxgeneric | 5.13 | Not reported |
Published upstream
May 20, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%*p.." The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that will never be freed. If an event references data that was allocated when the event triggered and that same data is freed before the event is read, then the kernel can crash by reading freed memory. The verifier runs at boot up (or module load) and scans the print formats of the events and checks their arguments to make sure that dereferenced pointers are safe. If the format uses "%*p.." the verifier will ignore it, and that could be dangerous. Cover this case as well. Also add to the sample code a use case of "%*pbl".
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2025-37938 records a Unknown severity vulnerability in tracing: Verify event formats that have "%*p..". The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5013f454a352cce8e62162976026a9c472595e42 <6854c87ac823181c810f8c07489ba543260c0023 || >=5013f454a352cce8e62162976026a9c472595e42 <4d11fac941d83509be4e6a21038281d6d96da50c || >=5013f454a352cce8e62162976026a9c472595e42 <03127354027508d076073b020d3070990fd6a958 || >=5013f454a352cce8e62162976026a9c472595e42 <04b80d45ecfaf780981d6582899e3ab205e4aa08 || >=5013f454a352cce8e62162976026a9c472595e42 <c7204fd1758c0caf1938e8a59809a1fdf28a8114 || >=5013f454a352cce8e62162976026a9c472595e42 <ea8d7647f9ddf1f81e2027ed305299797299aa03 | 6854c87ac823181c810f8c07489ba543260c0023, 4d11fac941d83509be4e6a21038281d6d96da50c, 03127354027508d076073b020d3070990fd6a958, 04b80d45ecfaf780981d6582899e3ab205e4aa08, c7204fd1758c0caf1938e8a59809a1fdf28a8114, ea8d7647f9ddf1f81e2027ed305299797299aa03 |
| Linux/Linuxgeneric | 5.13 | Not reported |
Published upstream
May 20, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%*p.." The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that will never be freed. If an event references data that was allocated when the event triggered and that same data is freed before the event is read, then the kernel can crash by reading freed memory. The verifier runs at boot up (or module load) and scans the print formats of the events and checks their arguments to make sure that dereferenced pointers are safe. If the format uses "%*p.." the verifier will ignore it, and that could be dangerous. Cover this case as well. Also add to the sample code a use case of "%*pbl".
Quoted source text, attributed separately from HOL analysis.