5.5

CVE-2025-21728

bpf: Send signals asynchronously if !preemptible

In the Linux kernel, the following vulnerability has been resolved:

bpf: Send signals asynchronously if !preemptible

BPF programs can execute in all kinds of contexts and when a program
running in a non-preemptible context uses the bpf_send_signal() kfunc,
it will cause issues because this kfunc can sleep.
Change `irqs_disabled()` to `!preemptible()`.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.4.33 < 5.4.291
Linux ≫ Linux Kernel Version >= 5.5.18 < 5.6
Linux ≫ Linux Kernel Version >= 5.6.1 < 5.10.235
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.179
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.129
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.76
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.13
Linux ≫ Linux Kernel Version >= 6.13 < 6.13.2
Linux ≫ Linux Kernel Version5.6 Update-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.079
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/092fc76b7ab4163e008f9cde596a58dad2108260
Patch
https://git.kernel.org/stable/c/78b97783496b454435639937db3303e900a24d3f
Patch
https://git.kernel.org/stable/c/87c544108b612512b254c8f79aa5c0a8546e2cc4
Patch
https://git.kernel.org/stable/c/be42a09fe898635b0093c0c8dac1bfabe225c240
Patch
https://git.kernel.org/stable/c/eeef8e65041a031bd8a747a392c14b76a123a12c
Patch
https://git.kernel.org/stable/c/ce51eab2070e295d298f42a2f1db269cd1b56d55
Patch
https://git.kernel.org/stable/c/e306eaaa3d78b462db5f5b11e0171f9d2b6ca3f4
Patch
https://git.kernel.org/stable/c/feba1308bc5e8e04cee751d39fae8a9b407a9034
Patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
https://cert-portal.siemens.com/productcert/html/ssa-082556.html