CVE-2025-21694

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 12, 2025
Updated: Feb 14, 2025

Summary

CVE-2025-21694 is a vulnerability affecting the Linux kernel's `fs/proc` component. This issue, which was resolved in commit 5cbcb62dddf5, involves softlockups in the `__read_vmcore` function during kdump time. Although the number of occurrences has decreased, softlockups can still interfere with critical memory management tasks like RCU, resulting in crashes. To address this concern, a `cond_resched()` call has been added to the second loop in `__read_vmcore` to help eliminate softlockups and ensure the stability of the kdump image.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share