PT-2025-6930 · Linux+7 · Linux Kernel+7

Breno Leitao · Published 2025-01-10 · Updated 2025-10-03 · CVE-2025-21694

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A softlockup issue in the read vmcore function has been resolved. This issue occurred in memory-constrained environments, such as the kdump image, and could interfere with memory freeing by RCU, causing the crashdump to get stuck. The second loop in read vmcore has more opportunities for natural sleep points, but adding a cond resched() to this loop should help eliminate the softlockups.

Recommendations: To resolve this issue, apply the patch that adds a cond resched() to the second loop in read vmcore. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

ALT-PU-2025-12647

ALT-PU-2025-3122

ALT-PU-2025-3467

ALT-PU-2025-3500

ALT-PU-2025-5437

AZL-56800

AZL-56831

BDU:2025-11807

CVE-2025-21694

DLA-4075-1

DLA-4076-1

INFSA-2025_6966

OESA-2025-1159

OESA-2025-1160

RHSA-2025:6966

RHSA-2025_6966

USN-7387-1

USN-7387-2

USN-7387-3

USN-7388-1

USN-7389-1

USN-7390-1

USN-7391-1

USN-7392-1

USN-7392-2

USN-7392-3

USN-7392-4

USN-7393-1

USN-7401-1

USN-7407-1

USN-7413-1

USN-7421-1

USN-7445-1

USN-7448-1

USN-7458-1

USN-7459-1

USN-7459-2

USN-7463-1

USN-7539-1

USN-7540-1

USN-7595-1

USN-7595-2

USN-7595-3

USN-7595-4

USN-7595-5

USN-7596-1

USN-7596-2

USN-7653-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Ubuntu

References · 825

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21694.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7653-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50151 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21676 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-2312 · Vendor Advisory