PT-2025-9982 · Linux+3 · Linux Kernel+3

Rafael Buchbinder · Published 2025-02-06 · Updated 2025-04-01 · CVE-2025-21834

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the seccomp filtering of the uretprobe system call. When uretprobes are attached to processes running inside Docker, the attached process is segfaulted due to the default seccomp filters in Docker blocking the uretprobe system call. This issue affects userspace applications that use seccomp to control their syscall surface. The uretprobe system call is a kernel implementation detail and is not used directly by userspace application code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2025-11804

CVE-2025-21834

USN-7379-1

USN-7379-2

USN-7380-1

USN-7381-1

USN-7382-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 340

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21834.json · Exploit
• https://ubuntu.com/security/CVE-2024-56550 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56655 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56605 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57887 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56646 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56759 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-21834 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21653 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57801 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-55641 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56587 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56586 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49568 · Vendor Advisory