CVE-2025-21684 — Improper Locking in Linux

CWE-667 — Improper Locking53 documents7 sources
Severity
5.5MEDIUMNVD
OSV8.8OSV7.8OSV5.9
EPSS
0.0%
top 98.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
LinuxLinux KernelDebian Linux+5 more
Timeline
PublishedFeb 9
Latest updateJul 17

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: Convert gpio_lock to raw spinlock irq_chip functions may be called in raw spinlock context. Therefore, we must also use a raw spinlock for our own internal locking. This fixes the following lockdep splat: [ 5.349336] ============================= [ 5.353349] [ BUG: Invalid wait context ] [ 5.357361] 6.13.0-rc5+ #69 Tainted: G W [ 5.363031] ----------------------------- [ 5.367045] kworker/u17:1/44 is trying to …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages10 packages

▶NVDlinux/linux_kernel5.12 — 6.6.74+2
▶Debianlinux/linux_kernel< 6.1.129-1+2
▶Ubuntulinux/linux_kernel< 5.15.0-140.150+1

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

26
OSV
linux-hwe-6.8 vulnerabilities↗2025-07-17
▶
OSV
linux-gcp, linux-gcp-6.8 vulnerabilities↗2025-06-30
▶
OSV
linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities↗2025-06-26
▶
OSV
linux-xilinx-zynqmp vulnerabilities↗2025-06-26
▶
OSV
linux-raspi-realtime vulnerabilities↗2025-06-25
▶

📋Vendor Advisories

26
Ubuntu
Linux kernel (HWE) vulnerabilities↗2025-07-17
▶
Ubuntu
Linux kernel vulnerabilities↗2025-06-30
▶
Ubuntu
Linux kernel (Xilinx ZynqMP) vulnerabilities↗2025-06-26
▶
Ubuntu
Linux kernel (Azure, N-Series) vulnerabilities↗2025-06-25
▶
Ubuntu
Linux kernel (Raspberry Pi Real-time) vulnerabilities↗2025-06-25
▶
CVE-2025-21684 — Improper Locking in Linux | cvebase