-

CVE-2025-40021

tracing: dynevent: Add a missing lockdown check on dynevent

In the Linux kernel, the following vulnerability has been resolved:

tracing: dynevent: Add a missing lockdown check on dynevent

Since dynamic_events interface on tracefs is compatible with
kprobe_events and uprobe_events, it should also check the lockdown
status and reject if it is set.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5
Version < f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf
Status affected
Version 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5
Version < 0d41604d2d53c1abe27fefb54b37a8f6642a4d74
Status affected
Version 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5
Version < 07b1f63b5f86765793fab44d3d4c2be681cddafb
Status affected
Version 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5
Version < 3887f3814c0e770e6b73567fe0f83a2c01a6470c
Status affected
Version 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5
Version < 573b1e39edfcb7b4eecde0f1664455a1f4462eee
Status affected
Version 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5
Version < b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb
Status affected
Version 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5
Version < 456c32e3c4316654f95f9d49c12cbecfb77d5660
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.4
Status affected
Version 0
Version < 5.4
Status unaffected
Version <= 5.10.*
Version 5.10.245
Status unaffected
Version <= 5.15.*
Version 5.15.194
Status unaffected
Version <= 6.1.*
Version 6.1.155
Status unaffected
Version <= 6.6.*
Version 6.6.109
Status unaffected
Version <= 6.12.*
Version 6.12.50
Status unaffected
Version <= 6.16.*
Version 6.16.10
Status unaffected
Version <= *
Version 6.17
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.181
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.