CVE-2025-21634 — Improper Locking in Linux

CWE-667 — Improper LockingCWE-99 — Resource Injection37 documents6 sources
Severity
5.5MEDIUMNVD
OSV7.8OSV7.1OSV6.2
EPSS
0.0%
top 97.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedJan 19
Latest updateMay 29

Description

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at fs/kernfs/file.c:828 CPU: 10 PID: 3486953 Comm: rmdir Kdump: loaded Tainted: G RIP: 0010:kernfs_should_drain_open_files+0x1a1/0x1b0 RSP: 0018:ffff8881107ef9e0 EFLAGS: 00010202 RAX: 0000000080000002 RBX: ffff888154738c00 RCX: dffffc0000000000 RDX: 0000000000000007 RSI: 0000000000000004 RDI: ffff888154738c04 RBP: ffff888154738c04 R08…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

▶NVDlinux/linux_kernel3.16 — 6.12.10+1
▶Debianlinux/linux_kernel< 6.12.10-1+1
▶Ubuntulinux/linux_kernel< 6.8.0-60.63
▶CVEListV5linux/linux76bb5ab8f6e3e7bebdcefec4146ff305e7d0b465 — 11cb1d643a74665a4e14749414f48f82cbc15c64+2
▶debiandebian/linux< linux 6.12.10-1 (forky)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

18
OSV
linux-oracle-6.8 vulnerabilities↗2025-05-29
▶
OSV
linux-hwe-6.8 vulnerabilities↗2025-05-28
▶
OSV
linux-raspi vulnerabilities↗2025-05-26
▶
OSV
linux-azure-nvidia vulnerabilities↗2025-05-20
▶
OSV
linux-raspi-realtime vulnerabilities↗2025-05-20
▶

📋Vendor Advisories

18
Ubuntu
Linux kernel (Oracle) vulnerabilities↗2025-05-29
▶
Ubuntu
Linux kernel (HWE) vulnerabilities↗2025-05-28
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2025-05-26
▶
Ubuntu
Linux kernel vulnerabilities↗2025-05-20
▶
Ubuntu
Linux kernel (Azure, N-Series) vulnerabilities↗2025-05-20
▶