In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() When the kernel contains a large number of functions that can be traced, the loop in ftrace_graph_set_hash() may take a lot of time to execute. This may trigger the softlockup watchdog. Add cond_resched() within the loop to allow the kernel to remain responsive even when processing a large number of functions. This matches the cond_resched() that is used in other locations of the code that iterates over all functions that can be traced.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/1fce9574b9d515bcb8a75379a8053e18602424e3 cve-icon cve-icon
https://git.kernel.org/stable/c/42ea22e754ba4f2b86f8760ca27f6f71da2d982c cve-icon cve-icon
https://git.kernel.org/stable/c/4429535acab750d963fdc3dfcc9e0eee42f4d599 cve-icon cve-icon
https://git.kernel.org/stable/c/5d336ac215e5c76e43ef4bca9ba699835e53e2fd cve-icon cve-icon
https://git.kernel.org/stable/c/618655d54c5f8af5d57b77491d08c0f0ff77d114 cve-icon cve-icon
https://git.kernel.org/stable/c/72be43ff061a889c6ee648a330a42486cafa15a6 cve-icon cve-icon
https://git.kernel.org/stable/c/8dd7d7280357596ba63dfdb4c1725d9dd24bd42a cve-icon cve-icon
https://git.kernel.org/stable/c/dd38803c9088b848c6b56f4f6d7efc4497bfde61 cve-icon cve-icon
https://git.kernel.org/stable/c/e5b4ae6f01d4a510d5725eca7254519a1093920d cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025052028-CVE-2025-37940-37d1@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-37940 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-37940 cve-icon
History

Mon, 03 Nov 2025 20:30:00 +0000

Type Values Removed Values Added
References

Tue, 17 Jun 2025 06:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Fri, 06 Jun 2025 22:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Tue, 27 May 2025 02:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Tue, 20 May 2025 16:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() When the kernel contains a large number of functions that can be traced, the loop in ftrace_graph_set_hash() may take a lot of time to execute. This may trigger the softlockup watchdog. Add cond_resched() within the loop to allow the kernel to remain responsive even when processing a large number of functions. This matches the cond_resched() that is used in other locations of the code that iterates over all functions that can be traced.
Title ftrace: Add cond_resched() to ftrace_graph_set_hash()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-05-20T15:58:17.634Z

Updated: 2025-11-03T19:57:35.970Z

Reserved: 2025-04-16T04:51:23.971Z

Link: CVE-2025-37940

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-05-20T16:15:31.737

Modified: 2025-11-03T20:18:42.727

Link: CVE-2025-37940

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-05-20T00:00:00Z

Links: CVE-2025-37940 - Bugzilla