CVE-2025-21853

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/03/2025
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> bpf: avoid holding freeze_mutex during mmap operation<br /> <br /> We use map-&gt;freeze_mutex to prevent races between map_freeze() and<br /> memory mapping BPF map contents with writable permissions. The way we<br /> naively do this means we&amp;#39;ll hold freeze_mutex for entire duration of all<br /> the mm and VMA manipulations, which is completely unnecessary. This can<br /> potentially also lead to deadlocks, as reported by syzbot in [0].<br /> <br /> So, instead, hold freeze_mutex only during writeability checks, bump<br /> (proactively) "write active" count for the map, unlock the mutex and<br /> proceed with mmap logic. And only if something went wrong during mmap<br /> logic, then undo that "write active" counter increment.<br /> <br /> [0] https://lore.kernel.org/bpf/678dcbc9.050a0220.303755.0066.GAE@google.com/

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 6.6.80 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.17 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.13.5 (excluding)
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*