CVE-2025-21694

MEDIUM

Linux Kernel - Denial of Service via Softlockup in __read_vmcore

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in __read_vmcore (part 2) Since commit 5cbcb62dddf5 ("fs/proc: fix softlockup in __read_vmcore") the number of softlockups in __read_vmcore at kdump time have gone down, but they still happen sometimes. In a memory constrained environment like the kdump image, a softlockup is not just a harmless message, but it can interfere with things like RCU freeing memory, causing the crashdump to get stuck. The second loop in __read_vmcore has a lot more opportunities for natural sleep points, like scheduling out while waiting for a data write to happen, but apparently that is not always enough. Add a cond_resched() to the second loop in __read_vmcore to (hopefully) get rid of the softlockups.

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 13.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (33)
linux/Kernel < 5.4.290linux
linux/Kernel 5.11.0 - 5.15.177linux
linux/Kernel 5.16.0 - 6.1.127linux
linux/Kernel 5.5.0 - 5.10.234linux
linux/Kernel 6.2.0 - 6.6.74linux
linux/Kernel 6.7.0 - 6.12.11linux
Linux/Linux < 6.10
Linux/Linux 4.19.317 - 4.20
Linux/Linux 5.10.221 - 5.10.234
Linux/Linux 5.10.234 - 5.10.*
... and 23 more
Published Feb 12, 2025
Tracked Since Feb 18, 2026