CVE-2025-21728 Details
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Send signals asynchronously if !preemptible BPF programs can execute in all kinds of contexts and when a program running in a non-preemptible context uses the bpf_send_signal() kfunc, it will cause issues because this kfunc can sleep. Change `irqs_disabled()` to `!preemptible()`.
A vulnerability in the Linux kernel's BPF (Berkeley Packet Filter) implementation allows for improper signal handling in non-preemptible contexts. When a BPF program running in such a context calls the bpf_send_signal() kfunc, it can lead to issues because this function is designed to sleep. The vulnerability arises from the BPF program's ability to execute in various contexts, including non-preemptible ones.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.4.33, < 5.4.291 >= 5.5.18, < 5.6 >= 5.6.1, < 5.10.235 >= 5.11, < 5.15.179 >= 5.16, < 6.1.129 >= 6.2, < 6.6.76 >= 6.7, < 6.12.13 >= 6.13, < 6.13.2 5.6 - |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | siemens-SADP |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 12, 2026 | CVE Modified | siemens-SADP |
| Nov 3, 2025 | CVE Modified | CVE |
| Oct 23, 2025 | Initial Analysis | [email protected] |
| Mar 13, 2025 | CVE Modified | kernel.org |
| Feb 27, 2025 | New CVE Received | kernel.org |