Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-40021

tracing: dynevent: Add a missing lockdown check on dynevent

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown status and reject if it is set.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to < f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abfaffected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to < 0d41604d2d53c1abe27fefb54b37a8f6642a4d74affected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to < 07b1f63b5f86765793fab44d3d4c2be681cddafbaffected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to < 3887f3814c0e770e6b73567fe0f83a2c01a6470caffected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to < 573b1e39edfcb7b4eecde0f1664455a1f4462eeeaffected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to < b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bbaffected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to < 456c32e3c4316654f95f9d49c12cbecfb77d5660affected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 5.10.245 to ≤ 5.10.*unaffected
  • 5.15.194 to ≤ 5.15.*unaffected
  • 6.1.155 to ≤ 6.1.*unaffected
  • 6.6.109 to ≤ 6.6.*unaffected
  • 6.12.50 to ≤ 6.12.*unaffected
  • 6.16.10 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References