Riskcovery

CVE-2025-40021

tracing: dynevent: Add a missing lockdown check on dynevent

State
Published
Severity
Not scored
Published
Oct 24, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tracing: dynevent: Add a missing lockdown check on dynevent

Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown status and reject if it is set.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abfAffected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before 0d41604d2d53c1abe27fefb54b37a8f6642a4d74Affected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before 07b1f63b5f86765793fab44d3d4c2be681cddafbAffected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before 3887f3814c0e770e6b73567fe0f83a2c01a6470cAffected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before 573b1e39edfcb7b4eecde0f1664455a1f4462eeeAffected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bbAffected
  • 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 to before 456c32e3c4316654f95f9d49c12cbecfb77d5660Affected
LinuxLinux
  • 5.4Affected
  • before 5.4Not affected
  • 5.10.245 through 5.10.*Not affected
  • 5.15.194 through 5.15.*Not affected
  • 6.1.155 through 6.1.*Not affected
  • 6.6.109 through 6.6.*Not affected
  • 6.12.50 through 6.12.*Not affected
  • 6.16.10 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.