CVE-2025-37940
kernel: ftrace: Add cond_resched() to ftrace_graph_set_hash()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 20, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
ftrace: Add cond_resched() to ftrace_graph_set_hash()
When the kernel contains a large number of functions that can be traced, the loop in ftrace_graph_set_hash() may take a lot of time to execute. This may trigger the softlockup watchdog.
Add cond_resched() within the loop to allow the kernel to remain responsive even when processing a large number of functions.
This matches the cond_resched() that is used in other locations of the code that iterates over all functions that can be traced.
Statement
Iterating over a large set of traceable functions could trigger soft lockups, affecting system responsiveness. Not exploitable by unprivileged users (requires CAP_SYS_ADMIN). No impact on confidentiality or integrity. Only availability affected due to potential soft lockup in specific configurations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE not specified