PT-2025-9004 · Linux+3 · Linux Kernel+3

Matt Fleming · Publicado 2025-02-07 · Atualizado 2025-05-07 · CVE-2025-21813

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, related to the timers/migration component. The issue arises from an off-by-one error when connecting a new root to the old root, resulting in the old root not being connected to the new root. This can lead to the system running with more than one top-level idle migrator, defeating its purpose. The problem is caused by the children counter of the new root not being correctly updated, leading to potential overcommit and incorrect initialization of the group mask. Although the issue is harmless in certain scenarios, it can still cause warnings and odd behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Enumeração de Fraquezas

CWE-362

CWE-193

Identificadores relacionados

BDU:2025-11993

CVE-2025-21813

USN-7489-1

USN-7489-2

USN-7491-1

USN-7499-1

Produtos afetados

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

Referências · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21813.json · Exploit
• https://github.com/torvalds/linux/commit/868c9037df626b3c245ee26a290a03ae1f9f58d3 · Nota
• https://ubuntu.com/security/CVE-2025-21902 · Aviso do Fabricante
• https://twitter.com/cybercronai/status/1895900692637745204 · Publicação no Twitter
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-21813 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2025-21813 · Nota de Segurança
• https://ubuntu.com/security/CVE-2025-21953 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-21813 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-11993 · Nota de Segurança
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Nota
• https://twitter.com/Cezar_H_Linux/status/1919877546344071626 · Publicação no Twitter
• https://security-tracker.debian.org/tracker/CVE-2025-21813 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-7489-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-7491-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-7499-1 · Aviso do Fabricante