CVE-2025-68173
Published Dec 16, 2025
Modified Apr 15, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix softlockup in ftrace_module_enable A soft lockup was observed when loading amdgpu module. If a module has a lot of tracable functions, multiple calls to kallsyms_lookup can spend too much time in RCU critical section and with disabled preemption, causing kernel panic. This is the same issue that was fixed in commit d0b24b4e91fc ("ftrace: Prevent RCU stall on PREEMPT_VOLUNTARY kernels") and commit 42ea22e754ba ("ftrace: Add cond_resched() to ftrace_graph_set_hash()"). Fix it the same way by adding cond_resched() in ftrace_module_enable.
Is your site exposed to CVE-2025-68173?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/4099b98203d6b33d990586542fa5beee408032a3
https://git.kernel.org/stable/c/40c8ee40e48a2c82c762539952ed8fc0571db5bf
https://git.kernel.org/stable/c/7e3c96010ade29bb340a5bdce8675f50c7f59001
https://git.kernel.org/stable/c/a1dd0abd741a8111260676da729825d6c1461a71
https://git.kernel.org/stable/c/e81e6d6d99b16dae11adbeda5c996317942a940c
Frequently Asked Questions
What is CVE-2025-68173? +
In the Linux kernel, the following vulnerability has been resolved:
ftrace: Fix softlockup in ftrace_module_enable
A soft lockup was observed when loading amdgpu module.
If a module has a lot of tracable functions, multiple calls
to kallsyms_lookup can spend too much time in RCU critical
section and with disabled preemption, causing kernel panic.
This is the same issue that was fixed in
commit d0b24b4e91fc ("ftrace: Prevent RCU stall on PREEMPT_VOLUNTARY
kernels") and commit 42ea22e754ba ("ftrace: Add cond_resched() to
ftrace_graph_set_hash()").
Fix it the same way by adding cond_resched() in ftrace_module_enable.
How do I check if I'm vulnerable to CVE-2025-68173? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.