CVE-2025-21694

Published Feb 12, 2025

Last updated 2 months ago

CVSS medium 5.5

Overview

Description: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2) Since commit 5cbcb62dddf5 ("fs/proc: fix softlockup in __read_vmcore") the number of softlockups in __read_vmcore at kdump time have gone down, but they still happen sometimes. In a memory constrained environment like the kdump image, a softlockup is not just a harmless message, but it can interfere with things like RCU freeing memory, causing the crashdump to get stuck. The second loop in __read_vmcore has a lot more opportunities for natural sleep points, like scheduling out while waiting for a data write to happen, but apparently that is not always enough. Add a cond_resched() to the second loop in __read_vmcore to (hopefully) get rid of the softlockups.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DBCC7CEA-15C0-47C4-8D3B-10F7FF0BEBA3",
            "versionEndExcluding": "4.20",
            "versionStartIncluding": "4.19.317"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "34F4B425-5BC9-41A8-A854-76462A933A22",
            "versionEndExcluding": "5.4.290",
            "versionStartIncluding": "5.4.279"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F56C8BB3-6F28-497B-AD0A-FB567EAAC3E4",
            "versionEndExcluding": "5.10.234",
            "versionStartIncluding": "5.10.221"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A98310AE-F6B9-42BC-80BA-919A4ADE77E7",
            "versionEndExcluding": "5.15.177",
            "versionStartIncluding": "5.15.162"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "96A4B1CA-339F-4E20-B649-CD4A34DDF077",
            "versionEndExcluding": "6.1.127",
            "versionStartIncluding": "6.1.95"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "52E9209F-1721-467F-9588-38F544C837A0",
            "versionEndExcluding": "6.6.74",
            "versionStartIncluding": "6.6.35"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8AF64430-37DA-41A5-A630-9BAC600DC51D",
            "versionEndExcluding": "6.12.11",
            "versionStartIncluding": "6.9.6"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "034C36A6-C481-41F3-AE9A-D116E5BE6895"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5DFCDFB8-4FD0-465A-9076-D813D78FE51B"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

References