CVE-2025-39914: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability in the Linux kernel's tracing subsystem was discovered and assigned CVE-2025-39914. The issue was disclosed on October 1, 2025, affecting the kernel's tracing functionality, specifically related to chunk allocation failures in tracepidwrite (NVD, RedHat CVE).

The vulnerability manifests when Syzkaller triggers a fault injection warning in the tracepointaddfunc function. The issue occurs during chunk allocation in tracepidlistalloc, which can lead to a failure in tracepidlistset. This may result in a double registration of the same tracepoint. The vulnerability has been assigned a CVSS v3.1 score of 7.0 with vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H (RedHat CVE).

The vulnerability can trigger a warning in the Linux kernel when the system is about to crash. While the immediate impact appears to be limited to system warnings, the potential for double registration of tracepoints could lead to system instability (NVD).

The vulnerability has been resolved by adding failure handling logic to tracepidlist_set. This fix prevents the double registration of tracepoints when chunk allocation fails (NVD).