HomeDefectsLIN1023-11453
Fixed

LIN1023-11453 : Security Advisory - linux - CVE-2025-21728

Created: Feb 27, 2025    Updated: Apr 7, 2025
Resolved Date: Mar 24, 2025
Found In Version: 10.23.30.1
Fix Version: 10.23.30.16
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Send signals asynchronously if !preemptible

BPF programs can execute in all kinds of contexts and when a program
running in a non-preemptible context uses the bpf_send_signal() kfunc,
it will cause issues because this kfunc can sleep.
Change `irqs_disabled()` to `!preemptible()`.

CREATE(Triage):(User=admin) CVE-2025-21728 (https://nvd.nist.gov/vuln/detail/CVE-2025-21728)

CVEs