CVE-2025-21728: bpf: Send signals asynchronously if !preemptible
In the Linux kernel, the following vulnerability has been resolved:
bpf: Send signals asynchronously if !preemptible
BPF programs can execute in all kinds of contexts and when a program running in a non-preemptible context uses the bpfsendsignal() kfunc, it will cause issues because this kfunc can sleep. Change irqsdisabled() to !preemptible().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21728?
CVE-2025-21728 is considered a medium severity vulnerability due to its implications in signal handling within a non-preemptible context.
How do I fix CVE-2025-21728?
To fix CVE-2025-21728, you should update your Linux kernel to a version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2025-21728?
CVE-2025-21728 affects Linux kernel versions from 5.4.33 to 6.13.2, including various specific ranges within these versions.
What vulnerabilities does CVE-2025-21728 address regarding BPF programs?
CVE-2025-21728 addresses issues related to BPF programs executing in non-preemptible contexts, which can lead to improper signal sending.
Is CVE-2025-21728 a zero-day vulnerability?
CVE-2025-21728 is not classified as a zero-day vulnerability since it has been publicly disclosed and a patch is available.