In the Linux kernel, the following vulnerability has been resolved:
trace/fgraph: Fix the warning caused by missing unregister notifier
This warning was triggered during testing on v6.16:
notifier callback ftracesuspendnotifiercall already registered WARNING: CPU: 2 PID: 86 at kernel/notifier.c:23 notifierchainregister+0x44/0xb0 ... Call Trace: <TASK> blockingnotifierchainregister+0x34/0x60 registerftracegraph+0x330/0x410 ftraceprofilewrite+0x1e9/0x340 vfswrite+0xf8/0x420 ? filpflush+0x8a/0xa0 ? filpclose+0x1f/0x30 ? dodup2+0xaf/0x160 ksyswrite+0x65/0xe0 dosyscall64+0xa4/0x260 entrySYSCALL64after_hwframe+0x77/0x7f
When writing to the functionprofileenabled interface, the notifier was not unregistered after startgraphtracing failed, causing a warning the next time functionprofileenabled was written.
Fixed by adding unregisterpmnotifier in the exception path.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39829.json"
}[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"203274126310343371552860116870565065643",
"215358829555274373363684251872358082832",
"117911745814146675237896655018491370882",
"46745088348357971713020033570152106391"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2025-39829-427280ec",
"target": {
"file": "kernel/trace/fgraph.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a2deb9f8df70480050351ac27041f19bb9e718b"
},
{
"digest": {
"length": 1242.0,
"function_hash": "245627626182166717939732747991996812277"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2025-39829-d0aacdec",
"target": {
"function": "register_ftrace_graph",
"file": "kernel/trace/fgraph.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a2deb9f8df70480050351ac27041f19bb9e718b"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39829.json"