PT-2025-9982 · Linux+3 · Linux Kernel+3

Rafael Buchbinder · Publicado 2025-02-06 · Atualizado 2025-04-01 · CVE-2025-21834

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the seccomp filtering of the uretprobe system call. When uretprobes are attached to processes running inside Docker, the attached process is segfaulted due to the default seccomp filters in Docker blocking the uretprobe system call. This issue affects userspace applications that use seccomp to control their syscall surface. The uretprobe system call is a kernel implementation detail and is not used directly by userspace application code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

BDU:2025-11804

CVE-2025-21834

USN-7379-1

USN-7379-2

USN-7380-1

USN-7381-1

USN-7382-1

Produtos afetados

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

Referências · 340

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21834.json · Exploit
• https://github.com/torvalds/linux/commit/cf6cb56ef24410fb5308f9655087f1eddf4452e6 · Nota
• https://ubuntu.com/security/CVE-2024-56550 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2024-56655 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2024-56605 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2024-57887 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2024-56646 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2024-56759 · Aviso do Fabricante
• https://osv.dev/vulnerability/BELL-CVE-2025-21834 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-21653 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2024-57801 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2024-55641 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2024-57895 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2024-56587 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2024-56586 · Aviso do Fabricante