Skip to content
Not rated

CVE-2025-21728 In the Linux kernel, the following vulnerability has been resolved: bpf: Send signals asynchronously if !preemptible BPF…

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Send signals asynchronously if !preemptible BPF programs can execute in all kinds of contexts and when a program running in a non-preemptible context uses the bpf_send_signal() kfunc, it will cause issues because this kfunc can sleep. Change `irqs_disabled()` to `!preemptible()`.

Affected products and versions

Product Affected versions Fixed in
Linux 6.14 earliest → < 6.14 6.14
Linux 6.13 earliest → < 6.13.2 6.13.2
Linux 6.12 earliest → < 6.12.13 6.12.13
Linux 6.6 earliest → < 6.6.76 6.6.76
Linux 6.1 earliest → < 6.1.129 6.1.129
Linux 5.15 earliest → < 5.15.179 5.15.179
Linux 5.10 earliest → < 5.10.235 5.10.235
Linux 5.6 No fix stated
Linux 5.4 earliest → < 5.4.291 5.4.291
Show the 4 other branches
Product Affected versions Fixed in
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem Versions not published
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.5 → latest No fix stated
The 18286 CVEs of Linux →
Track this CVE