Security tracker / CVE-2025-21899

CVE-2025-21899

tracing: Fix bad hist from corrupting named_triggers list

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 067fe038e70f6 ("tracing: Add variable reference handling to hist
 carnil> triggers"). Vulnerable versions: 4.17.

Bugs

Status

Branch	Status
upstream	released (6.14-rc5) [6f86bdeab633a56d5c6dccf1a2c5989b6a5e323e]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.13-upstream-stable	released (6.13.6) [f1ae50cfb818ce1ac7a674406dfadb7653e2552d]
6.12-upstream-stable	released (6.12.18) [435d2964af815aae456db554c62963b4515f19d0]
6.6-upstream-stable	released (6.6.81) [43b254d46c740bf9dbe65709afa021dd726dfa99]
6.1-upstream-stable	released (6.1.130) [5ae1b18f05ee2b849dc03b6c15d7da0c1c6efa77]
5.10-upstream-stable	needed
sid	released (6.12.19-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.133-1)
5.10-bullseye-security	needed