CVE-2025-21728

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-21728
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21728.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-21728
Downstream
Related
Published
2025-02-27T02:07:34.114Z
Modified
2026-05-07T04:16:25.936762Z
Summary
bpf: Send signals asynchronously if !preemptible
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf: Send signals asynchronously if !preemptible

BPF programs can execute in all kinds of contexts and when a program running in a non-preemptible context uses the bpfsendsignal() kfunc, it will cause issues because this kfunc can sleep. Change irqs_disabled() to !preemptible().

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21728.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fd29a0242f86b2d95ad666aa9f92a3d0f7bfdab6
Fixed
feba1308bc5e8e04cee751d39fae8a9b407a9034
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1bc7896e9ef44fd77858b3ef0b8a6840be3a4494
Fixed
ce51eab2070e295d298f42a2f1db269cd1b56d55
Fixed
e306eaaa3d78b462db5f5b11e0171f9d2b6ca3f4
Fixed
be42a09fe898635b0093c0c8dac1bfabe225c240
Fixed
eeef8e65041a031bd8a747a392c14b76a123a12c
Fixed
78b97783496b454435639937db3303e900a24d3f
Fixed
092fc76b7ab4163e008f9cde596a58dad2108260
Fixed
87c544108b612512b254c8f79aa5c0a8546e2cc4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7930d01afb7281edd9782971e0cca6fe587c7a7b

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21728.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.4.291
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.235
Type
ECOSYSTEM
Events
Introduced
5.6.0
Fixed
5.15.179
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
6.1.129
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.6.76
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.12.13
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.13.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21728.json"