CVE-2025-21694

fs/proc: fix softlockup in __read_vmcore (part 2)

State: Published
Severity: 5.5 Medium
Published: Feb 12, 2025
Updated: Oct 15, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/proc: fix softlockup in __read_vmcore (part 2)

Since commit 5cbcb62dddf5 ("fs/proc: fix softlockup in __read_vmcore") the number of softlockups in __read_vmcore at kdump time have gone down, but they still happen sometimes.

In a memory constrained environment like the kdump image, a softlockup is not just a harmless message, but it can interfere with things like RCU freeing memory, causing the crashdump to get stuck.

The second loop in __read_vmcore has a lot more opportunities for natural sleep points, like scheduling out while waiting for a data write to happen, but apparently that is not always enough.

Add a cond_resched() to the second loop in __read_vmcore to (hopefully) get rid of the softlockups.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	803d5a33d5ffdc2d86dcc0cfa01655a330612cdb to before 84c4ed15626574c9ac6c1039ba9c137a77bcc7f2Affected 70c1835e776c8447c1aca87ddb38cfe764fe756a to before 80da29deb88a3a907441fc35bb7bac309f31e713Affected e1b160a50c756e0efbea290b9bf5117cb80e8c4b to before 649b266606bc413407ce315f710c8ce8a88ee30aAffected a373ad833a6bfe4bc6cedcf7e56a99cc6fd9a193 to before 65c367bd9d4f43513c7f837df5753bea9561b836Affected 518fbd644dabb6aedbdd4939c6c9cc1bf651459f to before a5a2ee8144c3897d37403a69118c3e3dc5713958Affected 5cbcb62dddf5346077feb82b7b0c9254222d3445 to before 80828540dad0757b6337c6561d49c81038f38d87Affected 5cbcb62dddf5346077feb82b7b0c9254222d3445 to before cbc5dde0a461240046e8a41c43d7c3b76d5db952Affected 7bdf1d550ddfcd9ab797087421f77b7aceddc8a7Affected e8780e8a0e25dc4c3927f611ec8970d26c0c7369Affected 5.4.279 to before 5.4.290Affected 5.10.221 to before 5.10.234Affected 5.15.162 to before 5.15.177Affected 6.1.95 to before 6.1.127Affected 6.6.35 to before 6.6.74Affected 4.19.317 to before 4.20Affected 6.9.6 to before 6.10Affected
LinuxLinux	6.10Affected before 6.10Not affected 5.4.290 through 5.4.Not affected 5.10.234 through 5.10.Not affected 5.15.177 through 5.15.Not affected 6.1.127 through 6.1.Not affected 6.6.74 through 6.6.Not affected 6.12.11 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

803d5a33d5ffdc2d86dcc0cfa01655a330612cdb to before 84c4ed15626574c9ac6c1039ba9c137a77bcc7f2Affected
70c1835e776c8447c1aca87ddb38cfe764fe756a to before 80da29deb88a3a907441fc35bb7bac309f31e713Affected
e1b160a50c756e0efbea290b9bf5117cb80e8c4b to before 649b266606bc413407ce315f710c8ce8a88ee30aAffected
a373ad833a6bfe4bc6cedcf7e56a99cc6fd9a193 to before 65c367bd9d4f43513c7f837df5753bea9561b836Affected
518fbd644dabb6aedbdd4939c6c9cc1bf651459f to before a5a2ee8144c3897d37403a69118c3e3dc5713958Affected
5cbcb62dddf5346077feb82b7b0c9254222d3445 to before 80828540dad0757b6337c6561d49c81038f38d87Affected
5cbcb62dddf5346077feb82b7b0c9254222d3445 to before cbc5dde0a461240046e8a41c43d7c3b76d5db952Affected
7bdf1d550ddfcd9ab797087421f77b7aceddc8a7Affected
e8780e8a0e25dc4c3927f611ec8970d26c0c7369Affected
5.4.279 to before 5.4.290Affected
5.10.221 to before 5.10.234Affected
5.15.162 to before 5.15.177Affected
6.1.95 to before 6.1.127Affected
6.6.35 to before 6.6.74Affected
4.19.317 to before 4.20Affected
6.9.6 to before 6.10Affected

LinuxLinux

6.10Affected
before 6.10Not affected
5.4.290 through 5.4.*Not affected
5.10.234 through 5.10.*Not affected
5.15.177 through 5.15.*Not affected
6.1.127 through 6.1.*Not affected
6.6.74 through 6.6.*Not affected
6.12.11 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.