CVE-2025-40021

Source
https://cve.org/CVERecord?id=CVE-2025-40021
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40021.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-40021
Downstream
Related
Published
2025-10-24T12:24:57.107Z
Modified
2026-03-20T12:43:08.798848Z
Summary
tracing: dynevent: Add a missing lockdown check on dynevent
Details

In the Linux kernel, the following vulnerability has been resolved:

tracing: dynevent: Add a missing lockdown check on dynevent

Since dynamicevents interface on tracefs is compatible with kprobeevents and uprobe_events, it should also check the lockdown status and reject if it is set.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40021.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
17911ff38aa58d3c95c07589dbf5d3564c4cf3c5
Fixed
f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf
Fixed
0d41604d2d53c1abe27fefb54b37a8f6642a4d74
Fixed
07b1f63b5f86765793fab44d3d4c2be681cddafb
Fixed
3887f3814c0e770e6b73567fe0f83a2c01a6470c
Fixed
573b1e39edfcb7b4eecde0f1664455a1f4462eee
Fixed
b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb
Fixed
456c32e3c4316654f95f9d49c12cbecfb77d5660

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40021.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.4.0
Fixed
5.10.245
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.194
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.155
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.109
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.50
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.16.10

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40021.json"