CVE-2025-21694

Summary

In the Linux kernel, the following vulnerability has been resolved:

fs/proc: fix softlockup in __read_vmcore (part 2)

Since commit 5cbcb62dddf5 ("fs/proc: fix softlockup in __read_vmcore") the number of softlockups in __read_vmcore at kdump time have gone down, but they still happen sometimes.

In a memory constrained environment like the kdump image, a softlockup is not just a harmless message, but it can interfere with things like RCU freeing memory, causing the crashdump to get stuck.

The second loop in __read_vmcore has a lot more opportunities for natural sleep points, like scheduling out while waiting for a data write to happen, but apparently that is not always enough.

Add a cond_resched() to the second loop in __read_vmcore to (hopefully) get rid of the softlockups.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux803d5a33d5ffdc2d86dcc0cfa01655a330612cdb < 84c4ed15626574c9ac6c1039ba9c137a77bcc7f2affected
LinuxLinux70c1835e776c8447c1aca87ddb38cfe764fe756a < 80da29deb88a3a907441fc35bb7bac309f31e713affected
LinuxLinuxe1b160a50c756e0efbea290b9bf5117cb80e8c4b < 649b266606bc413407ce315f710c8ce8a88ee30aaffected
LinuxLinuxa373ad833a6bfe4bc6cedcf7e56a99cc6fd9a193 < 65c367bd9d4f43513c7f837df5753bea9561b836affected
LinuxLinux518fbd644dabb6aedbdd4939c6c9cc1bf651459f < a5a2ee8144c3897d37403a69118c3e3dc5713958affected
LinuxLinux5cbcb62dddf5346077feb82b7b0c9254222d3445 < 80828540dad0757b6337c6561d49c81038f38d87affected
LinuxLinux5cbcb62dddf5346077feb82b7b0c9254222d3445 < cbc5dde0a461240046e8a41c43d7c3b76d5db952affected
LinuxLinux7bdf1d550ddfcd9ab797087421f77b7aceddc8a7affected
LinuxLinuxe8780e8a0e25dc4c3927f611ec8970d26c0c7369affected
LinuxLinux5.4.279 < 5.4.290affected
LinuxLinux5.10.221 < 5.10.234affected
LinuxLinux5.15.162 < 5.15.177affected
LinuxLinux6.1.95 < 6.1.127affected
LinuxLinux6.6.35 < 6.6.74affected
LinuxLinux4.19.317 < 4.20affected
LinuxLinux6.9.6 < 6.10affected
LinuxLinux6.10affected
LinuxLinux0 < 6.10unaffected
LinuxLinux5.4.290 <= 5.4.*unaffected
LinuxLinux5.10.234 <= 5.10.*unaffected
LinuxLinux5.15.177 <= 5.15.*unaffected
LinuxLinux6.1.127 <= 6.1.*unaffected
LinuxLinux6.6.74 <= 6.6.*unaffected
LinuxLinux6.12.11 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

Additional References

References