{"id":"CVE-2025-40021","state":"PUBLISHED","title":"tracing: dynevent: Add a missing lockdown check on dynevent","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: dynevent: Add a missing lockdown check on dynevent\n\nSince dynamic_events interface on tracefs is compatible with\nkprobe_events and uprobe_events, it should also check the lockdown\nstatus and reject if it is set.","publishedAt":"2025-10-24T12:24:57.107Z","updatedAt":"2026-05-11T21:40:56.795Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"0d41604d2d53c1abe27fefb54b37a8f6642a4d74","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"07b1f63b5f86765793fab44d3d4c2be681cddafb","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"3887f3814c0e770e6b73567fe0f83a2c01a6470c","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"573b1e39edfcb7b4eecde0f1664455a1f4462eee","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"456c32e3c4316654f95f9d49c12cbecfb77d5660","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/trace/trace_dynevent.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.4","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.4","versionType":"semver"},{"version":"5.10.245","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.194","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.155","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.109","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.50","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.16.10","status":"unaffected","lessThanOrEqual":"6.16.*","versionType":"semver"},{"version":"6.17","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/trace/trace_dynevent.c"]}],"references":["https://git.kernel.org/stable/c/f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf","https://git.kernel.org/stable/c/0d41604d2d53c1abe27fefb54b37a8f6642a4d74","https://git.kernel.org/stable/c/07b1f63b5f86765793fab44d3d4c2be681cddafb","https://git.kernel.org/stable/c/3887f3814c0e770e6b73567fe0f83a2c01a6470c","https://git.kernel.org/stable/c/573b1e39edfcb7b4eecde0f1664455a1f4462eee","https://git.kernel.org/stable/c/b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb","https://git.kernel.org/stable/c/456c32e3c4316654f95f9d49c12cbecfb77d5660"],"weaknesses":[],"ingestedAt":"2026-10-29T20:09:09.358Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/40xxx/CVE-2025-40021.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-40021","state":"PUBLISHED","datePublished":"2025-10-24T12:24:57.107Z","dateUpdated":"2026-05-11T21:40:56.795Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-04-16T07:20:57.152Z"},"containers":{"cna":{"title":"tracing: dynevent: Add a missing lockdown check on dynevent","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: dynevent: Add a missing lockdown check on dynevent\n\nSince dynamic_events interface on tracefs is compatible with\nkprobe_events and uprobe_events, it should also check the lockdown\nstatus and reject if it is set."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"0d41604d2d53c1abe27fefb54b37a8f6642a4d74","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"07b1f63b5f86765793fab44d3d4c2be681cddafb","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"3887f3814c0e770e6b73567fe0f83a2c01a6470c","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"573b1e39edfcb7b4eecde0f1664455a1f4462eee","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb","versionType":"git"},{"version":"17911ff38aa58d3c95c07589dbf5d3564c4cf3c5","status":"affected","lessThan":"456c32e3c4316654f95f9d49c12cbecfb77d5660","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/trace/trace_dynevent.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.4","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.4","versionType":"semver"},{"version":"5.10.245","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.194","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.155","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.109","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.50","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.16.10","status":"unaffected","lessThanOrEqual":"6.16.*","versionType":"semver"},{"version":"6.17","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/trace/trace_dynevent.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf"},{"url":"https://git.kernel.org/stable/c/0d41604d2d53c1abe27fefb54b37a8f6642a4d74"},{"url":"https://git.kernel.org/stable/c/07b1f63b5f86765793fab44d3d4c2be681cddafb"},{"url":"https://git.kernel.org/stable/c/3887f3814c0e770e6b73567fe0f83a2c01a6470c"},{"url":"https://git.kernel.org/stable/c/573b1e39edfcb7b4eecde0f1664455a1f4462eee"},{"url":"https://git.kernel.org/stable/c/b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb"},{"url":"https://git.kernel.org/stable/c/456c32e3c4316654f95f9d49c12cbecfb77d5660"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T21:40:56.795Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4","versionEndExcluding":"5.10.245"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4","versionEndExcluding":"5.15.194"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4","versionEndExcluding":"6.1.155"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4","versionEndExcluding":"6.6.109"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4","versionEndExcluding":"6.12.50"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4","versionEndExcluding":"6.16.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4","versionEndExcluding":"6.17"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}