Vulnerability in Linux

CVE-2025-40021

In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown status and reject if it is set.

EPSS: 0.002 (9.3th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5, 5.4, 0

References