Answer in brief
CVE-2025-39813 records a Medium severity (CVSS 4.7) vulnerability in ftrace: Fix potential warning in trace_printk_seq during ftrace_dump. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC CN 4100 (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 4.7. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC CN 4100 (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d769041f865330034131525ee6a7f72eb4af2a24 <f299353e7ccbcc5c2ed8993c48fbe7609cbe729a || >=d769041f865330034131525ee6a7f72eb4af2a24 <5ab0ec206deb99eb3baf8f1d7602aeaa91dbcc85 || >=d769041f865330034131525ee6a7f72eb4af2a24 <a6f0f8873cc30fd4543b09adf03f7f51d293f0e6 || >=d769041f865330034131525ee6a7f72eb4af2a24 <e80ff23ba8bdb0f41a1afe2657078e4097d13a9a || >=d769041f865330034131525ee6a7f72eb4af2a24 <28c8fb7ae2ad27d81c8de3c4fe608c509f6a18aa || >=d769041f865330034131525ee6a7f72eb4af2a24 <ced94e137e6cd5e79c65564841d3b7695d0f5fa3 || >=d769041f865330034131525ee6a7f72eb4af2a24 <fbd4cf7ee4db65ef36796769fe978e9eba6f0de4 || >=d769041f865330034131525ee6a7f72eb4af2a24 <4013aef2ced9b756a410f50d12df9ebe6a883e4a | f299353e7ccbcc5c2ed8993c48fbe7609cbe729a, 5ab0ec206deb99eb3baf8f1d7602aeaa91dbcc85, a6f0f8873cc30fd4543b09adf03f7f51d293f0e6, e80ff23ba8bdb0f41a1afe2657078e4097d13a9a, 28c8fb7ae2ad27d81c8de3c4fe608c509f6a18aa, ced94e137e6cd5e79c65564841d3b7695d0f5fa3, fbd4cf7ee4db65ef36796769fe978e9eba6f0de4, 4013aef2ced9b756a410f50d12df9ebe6a883e4a |
| Linux/Linuxgeneric | 2.6.28 | Not reported |
| Siemens/SIMATIC CN 4100generic | >=0 <V5.0 | V5.0 |
Published upstream
Sep 16, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 28, 2026
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one() concurrently with reading trace_pipe, a WARN_ON_ONCE() in trace_printk_seq() can be triggered due to a race condition. The issue occurs because: CPU0 (ftrace_dump) CPU1 (reader) echo z > /proc/sysrq-trigger !trace_empty(&iter) trace_iterator_reset(&iter) <- len = size = 0 cat /sys/kernel/tracing/trace_pipe trace_find_next_entry_inc(&iter) __find_next_entry ring_buffer_empty_cpu <- all empty return NULL trace_printk_seq(&iter.seq) WARN_ON_ONCE(s->seq.len >= s->seq.size) In the context between trace_empty() and trace_find_next_entry_inc() during ftrace_dump, the ring buffer data was consumed by other readers. This caused trace_find_next_entry_inc to return NULL, failing to populate `iter.seq`. At this point, due to the prior trace_iterator_reset, both `iter.seq.len` and `iter.seq.size` were set to 0. Since they are equal, the WARN_ON_ONCE condition is triggered. Move the trace_printk_seq() into the if block that checks to make sure the return value of trace_find_next_entry_inc() is non-NULL in ftrace_dump_one(), ensuring the 'iter.seq' is properly populated before subsequent operations.
Quoted source text, attributed separately from HOL analysis.