cbcvebase.
CVE-2025-21853
published 2025-03-12

CVE-2025-21853: In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freeze_mutex during mmap operation We use map->freeze_mutex to prevent…

PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.7th percentile
In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freeze_mutex during mmap operation We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0]. So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment. [0] https://lore.kernel.org/bpf/[email protected]/

Affected

25 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.135-1 (bookworm)linux 6.1.135-1 (bookworm)
debianlinux-6.1< linux 6.1.135-1 (bookworm)linux 6.1.135-1 (bookworm)
linuxlinux
linuxlinux>= fc9702273e2edb90400a34b3be76f7b08fa3344b < 2ce31c97c219b4fe797749f950274f246eb88c492ce31c97c219b4fe797749f950274f246eb88c49
linuxlinux>= fc9702273e2edb90400a34b3be76f7b08fa3344b < 0d90d9e154144a3a80e9fc0eb9b21b7fc990f68f0d90d9e154144a3a80e9fc0eb9b21b7fc990f68f
linuxlinux>= fc9702273e2edb90400a34b3be76f7b08fa3344b < 4759acbd44d24a69b7b14848012ec4201d6c55014759acbd44d24a69b7b14848012ec4201d6c5501
linuxlinux>= fc9702273e2edb90400a34b3be76f7b08fa3344b < 29cfda62ab4d92ab94123813db49ab76c1e61b2929cfda62ab4d92ab94123813db49ab76c1e61b29
linuxlinux>= fc9702273e2edb90400a34b3be76f7b08fa3344b < d95607a5f2f9bb08194c9deaf4a5f3e8ba59a9d4d95607a5f2f9bb08194c9deaf4a5f3e8ba59a9d4
linuxlinux>= fc9702273e2edb90400a34b3be76f7b08fa3344b < 271e49f8a58edba65bc2b1250a0abaa98c4bfdbe271e49f8a58edba65bc2b1250a0abaa98c4bfdbe
linuxlinux>= fc9702273e2edb90400a34b3be76f7b08fa3344b < bc27c52eea189e8f7492d40739b7746d67b65bebbc27c52eea189e8f7492d40739b7746d67b65beb
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.237-15.10.237-1
linuxlinux_kernel>= 0 < 6.1.135-16.1.135-1
linuxlinux_kernel>= 0 < 6.12.17-16.12.17-1
linuxlinux_kernel>= 0 < 6.12.17-16.12.17-1
linuxlinux_kernel>= 0 < 5.15.0-144.1575.15.0-144.157
linuxlinux_kernel>= 0 < 6.8.0-78.786.8.0-78.78
linuxlinux_kernel>= 5.5 < 6.6.806.6.80
linuxlinux_kernel>= 6.13 < 6.13.56.13.5
linuxlinux_kernel>= 6.7 < 6.12.176.12.17
msrcazl3_kernel_6.6.78.1-3_on_azure_linux_3.0
msrcazl3_kernel_6.6.82.1-1_on_azure_linux_3.0
msrccbl2_kernel_5.15.182.1-1_on_cbl_mariner_2.0

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.