CVE-2025-21728

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2025
Last modified:
13/03/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> bpf: Send signals asynchronously if !preemptible<br /> <br /> BPF programs can execute in all kinds of contexts and when a program<br /> running in a non-preemptible context uses the bpf_send_signal() kfunc,<br /> it will cause issues because this kfunc can sleep.<br /> Change `irqs_disabled()` to `!preemptible()`.

Impact