PT-2025-13226 · Linux+4 · Linux Kernel+4

Published 2025-01-17 · Updated 2026-04-20 · CVE-2025-21889

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue was related to the perf iterate ctx() function, which performs RCU list traversal but lacked RCU read lock protection, causing lockdep warnings when running perf probe with unshare(1) under CONFIG PROVE RCU LIST=y. The protection was previously present but was removed in a commit and has been added back.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-11963

CVE-2025-21889

OESA-2025-1371

OESA-2025-1372

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01707-1

SUSE-SU-2025:01614-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20206-1

SUSE-SU-2025:20270-1

SUSE-SU-2025:20283-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

USN-7521-1

USN-7521-2

USN-7521-3

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1913

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21889.json · Exploit
• https://ubuntu.com/security/CVE-2024-57997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21844 · Security Note
• https://osv.dev/vulnerability/USN-7764-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21871 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21864 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21791 · Security Note
• https://ubuntu.com/security/CVE-2025-21791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21978 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7800-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21820 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7764-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58082 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21977 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21742 · Vendor Advisory