CVE-2025-37940 ftrace: Add cond_resched() to ftrace_graph_set_hash()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft CVEs Address ftrace and sock_map Vulnerabilities Microsoft has published information on two vulnerabilities affecting its software. CVE-2025-37940 involves the ftrace subsystem, specifically adding cond_resched() to ftrace_graph_set_hash(), while CVE-2024-47710 pertains to the sock_map, where a cond_resched() was added in sock_hash_free(). Both vulnerabilities have been documented and are now publicly available. 2 sources 45