NetSight
medium5.5

CVE-2025-21728

In the Linux kernel, the following vulnerability has been resolved: bpf: Send signals asynchronously if !preemptible BPF programs can execute in all kinds of c…

Impact

In the Linux kernel, the following vulnerability has been resolved: bpf: Send signals asynchronously if !preemptible BPF programs can execute in all kinds of contexts and when a program running in a non-preemptible context uses the bpf_send_signal() kfunc, it will cause issues because this kfunc can sleep. Change `irqs_disabled()` to `!preemptible()`.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.4.33 before 5.4.291
from 5.5.18 before 5.6
from 5.6.1 before 5.10.235
from 5.11 before 5.15.179
from 5.16 before 6.1.129
from 6.2 before 6.6.76

References