CVE-2025-21986 — Improper Locking in Linux
Severity
5.5MEDIUMNVD
OSV5.9OSV4.7
EPSS
0.1%
top 80.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 1
Latest updateOct 15
Description
In the Linux kernel, the following vulnerability has been resolved:
net: switchdev: Convert blocking notification chain to a raw one
A blocking notification chain uses a read-write semaphore to protect the
integrity of the chain. The semaphore is acquired for writing when
adding / removing notifiers to / from the chain and acquired for reading
when traversing the chain and informing notifiers about an event.
In case of the blocking switchdev notification chain, recursive
notifications are pos…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages6 packages
▶CVEListV5linux/linux91ac2c79e896b28a4a3a262384689ee6dfeaf083 — af757f5ee3f754c5dceefb05c12ff37cb46fc682+6