CVE - CVE-2025-37845

CVE-ID
CVE-2025-37845	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 ("tracing: tprobe-events: Fix leakage of module refcount") moved try_module_get() from __find_tracepoint_module_cb() to find_tracepoint() caller, but that introduced a possible UAF because the module can be unloaded before try_module_get(). In this case, the module object should be freed too. Thus, try_module_get() does not only fail but may access to the freed object. To avoid that, try_module_get() in __find_tracepoint_module_cb() again.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/626f01f4d26e8cf92e69c1df53036153c8e98a20 URL:https://git.kernel.org/stable/c/626f01f4d26e8cf92e69c1df53036153c8e98a20 MISC:https://git.kernel.org/stable/c/868df4eb784c3ccc7e4340a9ea993cbbedca167e URL:https://git.kernel.org/stable/c/868df4eb784c3ccc7e4340a9ea993cbbedca167e MISC:https://git.kernel.org/stable/c/a27d2de2472b1cc7d582ab405d1d5832a80481de URL:https://git.kernel.org/stable/c/a27d2de2472b1cc7d582ab405d1d5832a80481de MISC:https://git.kernel.org/stable/c/dd941507a9486252d6fcf11814387666792020f3 URL:https://git.kernel.org/stable/c/dd941507a9486252d6fcf11814387666792020f3
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)