Medium 5.5Published Sep 16, 2025

CVE-2025-39829trace/fgraph: Fix the warning caused by missing unregister notifier

Updated under an hour ago (Oct 27, 2026, 10:50 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: Fix the warning caused by missing unregister notifier This warning was triggered during testing on v6.16: notifier callback ftrace_suspend_notifier_call already registered WARNING: CPU: 2 PID: 86 at kernel/notifier.c:23 notifier_chain_register+0x44/0xb0 ... Call Trace: <TASK> blocking_notifier_chain_register+0x34/0x60 register_ftrace_graph+0x330/0x410 ftrace_profile_write+0x1e9/0x340 vfs_write+0xf8/0x420 ? filp_flush+0x8a/0xa0 ? filp_close+0x1f/0x30 ? do_dup2+0xaf/0x160 ksys_write+0x65/0xe0 do_syscall_64+0xa4/0x260 entry_SYSCALL_64_after_hwframe+0x77/0x7f When writing to the function_profile_enabled interface, the notifier was not unregistered after start_graph_tracing failed, causing a warning the next time function_profile_enabled was written. Fixed by adding unregister_pm_notifier in the exception path.

CVSS: 5.5 MEDIUM (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 4a2b8dda3f8705880ec7408135645602d5590f51 before aa977309397fe2438801b1ca1ce7bc4106d8e985; 4a2b8dda3f8705880ec7408135645602d5590f51 builds before 2a2deb9f8df70480050351ac27041f19bb9e718b; 4a2b8dda3f8705880ec7408135645602d5590f51 builds before 000aa47a51233fd38a629b029478e0278e1e9fbe; from 4a2b8dda3f8705880ec7408135645602d5590f51 before edede7a6dcd7435395cf757d053974aaab6ab1c2	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.30 before 6.12.45; from 6.13 before 6.16.5; 6.17; 6.17	NVD

References

References

https://git.kernel.org/stable/c/aa977309397fe2438801b1ca1ce7bc4106d8e985
https://git.kernel.org/stable/c/2a2deb9f8df70480050351ac27041f19bb9e718b	patch
https://git.kernel.org/stable/c/000aa47a51233fd38a629b029478e0278e1e9fbe	patch
https://git.kernel.org/stable/c/edede7a6dcd7435395cf757d053974aaab6ab1c2	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.