CVE-2025-21853Deadlock in Linux

CWE-833Deadlock44 documents7 sources
Severity
5.5MEDIUMNVD
OSV8.8
EPSS
0.1%
top 75.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 12
Latest updateSep 3

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freeze_mutex during mmap operation We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0]. So, instead, hold freeze_mu

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages9 packages

Patches

🔴Vulnerability Details

21
OSV
linux-azure, linux-azure-6.8, linux-azure-nvidia vulnerabilities2025-09-03
OSV
linux-azure-5.15 vulnerabilities2025-09-02
OSV
linux-gke, linux-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi vulnerabilities2025-08-28
OSV
linux-raspi-realtime vulnerabilities2025-08-26
OSV
linux-azure-fips vulnerabilities2025-08-22

📋Vendor Advisories

22
Ubuntu
Linux kernel (Azure) vulnerabilities2025-09-03
Ubuntu
Linux kernel (Azure) vulnerabilities2025-09-02
Ubuntu
Linux kernel vulnerabilities2025-08-28
Ubuntu
Linux kernel (Raspberry Pi Real-time) vulnerabilities2025-08-26
Ubuntu
Linux kernel (Azure FIPS) vulnerabilities2025-08-22
CVE-2025-21853 — Deadlock in Linux | cvebase