CVE-2025-37938

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> tracing: Verify event formats that have "%*p.."<br /> <br /> The trace event verifier checks the formats of trace events to make sure<br /> that they do not point at memory that is not in the trace event itself or<br /> in data that will never be freed. If an event references data that was<br /> allocated when the event triggered and that same data is freed before the<br /> event is read, then the kernel can crash by reading freed memory.<br /> <br /> The verifier runs at boot up (or module load) and scans the print formats<br /> of the events and checks their arguments to make sure that dereferenced<br /> pointers are safe. If the format uses "%*p.." the verifier will ignore it,<br /> and that could be dangerous. Cover this case as well.<br /> <br /> Also add to the sample code a use case of "%*pbl".