Not yet scoredPublished Dec 16, 2025

CVE-2025-68173ftrace: Fix softlockup in ftrace_module_enable

Updated under an hour ago (Oct 27, 2026, 9:00 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix softlockup in ftrace_module_enable A soft lockup was observed when loading amdgpu module. If a module has a lot of tracable functions, multiple calls to kallsyms_lookup can spend too much time in RCU critical section and with disabled preemption, causing kernel panic. This is the same issue that was fixed in commit d0b24b4e91fc ("ftrace: Prevent RCU stall on PREEMPT_VOLUNTARY kernels") and commit 42ea22e754ba ("ftrace: Add cond_resched() to ftrace_graph_set_hash()"). Fix it the same way by adding cond_resched() in ftrace_module_enable.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b7ffffbb46f205e7727a18bcc7a46c3c2b534f7c before a1dd0abd741a8111260676da729825d6c1461a71; from b7ffffbb46f205e7727a18bcc7a46c3c2b534f7c before e81e6d6d99b16dae11adbeda5c996317942a940c; from b7ffffbb46f205e7727a18bcc7a46c3c2b534f7c before 40c8ee40e48a2c82c762539952ed8fc0571db5bf; from b7ffffbb46f205e7727a18bcc7a46c3c2b534f7c before 7e3c96010ade29bb340a5bdce8675f50c7f59001; from b7ffffbb46f205e7727a18bcc7a46c3c2b534f7c before 4099b98203d6b33d990586542fa5beee408032a3	CNA record

References

References

https://git.kernel.org/stable/c/a1dd0abd741a8111260676da729825d6c1461a71
https://git.kernel.org/stable/c/e81e6d6d99b16dae11adbeda5c996317942a940c
https://git.kernel.org/stable/c/40c8ee40e48a2c82c762539952ed8fc0571db5bf
https://git.kernel.org/stable/c/7e3c96010ade29bb340a5bdce8675f50c7f59001
https://git.kernel.org/stable/c/4099b98203d6b33d990586542fa5beee408032a3

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.