5.5

CVE-2025-39829: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2025-39829DEBIAN-CVE-2025-39829
Published 16-09-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2025-39829 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.5% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.15%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 25 · Related 24
DSA-6008-1OPENSUSE-SU-2026:20287-1SUSE-SU-2026:0447-1SUSE-SU-2026:0471-1SUSE-SU-2026:0472-1SUSE-SU-2026:0473-1

Timeline

  1. 16-09-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: Fix the warning caused by missing unregister notifier This warning was triggered during testing on v6.16: notifier callback ftrace_suspend_notifier_call already registered WARNING: CPU: 2 PID: 86 at kernel/notifier.c:23 notifier_chain_register+0x44/0xb0 ... Call Trace: <TASK> blocking_notifier_chain_register+0x34/0x60 register_ftrace_graph+0x330/0x410 ftrace_profile_write+0x1e9/0x340 vfs_write+0xf8/0x420 ? filp_flush+0x8a/0xa0 ? filp_close+0x1f/0x30 ? do_dup2+0xaf/0x160 ksys_write+0x65/0xe0 do_syscall_64+0xa4/0x260 entry_SYSCALL_64_after_hwframe+0x77/0x7f When writing to the function_profile_enabled interface, the notifier was not unregistered after start_graph_tracing failed, causing a warning the next time function_profile_enabled was written. Fixed by adding unregister_pm_notifier in the exception path.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.15%

Chance of exploitation in the next 30 days

Percentile

4%

Versus all other CVEs

30-day change

0.00 pp

From 0.14% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu149 products
  • linuxAll versions (No fix recorded) | < 6.8.0-106.106
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1050.53
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 4a2b8dda3f8705880ec7408135645602d5590f51, < 2a2deb9f8df70480050351ac27041f19bb9e718b | ≥ 4a2b8dda3f8705880ec7408135645602d5590f51, < 000aa47a51233fd38a629b029478e0278e1e9fbe | ≥ 4a2b8dda3f8705880ec7408135645602d5590f51, < edede7a6dcd7435395cf757d053974aaab6ab1c2 | 2.6.30
  • linux_kernel≥ 2.6.30, < 6.12.45 | ≥ 6.13, < 6.16.5 | 6.17:rc1 | 6.17:rc2
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.12.48-1 | < 6.16.5-1

3 vendors · 152 products

References

17 links
Show all 17 references