CVE-2025-21694

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/proc: fix softlockup in __read_vmcore (part 2)

Since commit 5cbcb62dddf5 ("fs/proc: fix softlockup in __read_vmcore") the number of softlockups in __read_vmcore at kdump time have gone down, but they still happen sometimes.

In a memory constrained environment like the kdump image, a softlockup is not just a harmless message, but it can interfere with things like RCU freeing memory, causing the crashdump to get stuck.

The second loop in __read_vmcore has a lot more opportunities for natural sleep points, like scheduling out while waiting for a data write to happen, but apparently that is not always enough.

Add a cond_resched() to the second loop in __read_vmcore to (hopefully) get rid of the softlockups.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 803d5a33d5ffdc2d86dcc0cfa01655a330612cdb, < 84c4ed15626574c9ac6c1039ba9c137a77bcc7f2; >= 70c1835e776c8447c1aca87ddb38cfe764fe756a, < 80da29deb88a3a907441fc35bb7bac309f31e713; >= e1b160a50c756e0efbea290b9bf5117cb80e8c4b, < 649b266606bc413407ce315f710c8ce8a88ee30a; >= a373ad833a6bfe4bc6cedcf7e56a99cc6fd9a193, < 65c367bd9d4f43513c7f837df5753bea9561b836; >= 518fbd644dabb6aedbdd4939c6c9cc1bf651459f, < a5a2ee8144c3897d37403a69118c3e3dc5713958; >= 5cbcb62dddf5346077feb82b7b0c9254222d3445, < 80828540dad0757b6337c6561d49c81038f38d87; >= 5cbcb62dddf5346077feb82b7b0c9254222d3445, < cbc5dde0a461240046e8a41c43d7c3b76d5db952; 7bdf1d550ddfcd9ab797087421f77b7aceddc8a7; e8780e8a0e25dc4c3927f611ec8970d26c0c7369; >= 5.4.279, < 5.4.290; >= 5.10.221, < 5.10.234; >= 5.15.162, < 5.15.177; >= 6.1.95, < 6.1.127; >= 6.6.35, < 6.6.74; >= 4.19.317, < 4.20; >= 6.9.6, < 6.10
LinuxLinux6.10
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensRUGGEDCOM RST2428P< V3.2
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family< V3.2
SiemensSCALANCE XCM-/XRM-/XCH-/XRH-300 family< V3.2

References

Timeline

Published
Feb 12, 2025
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-216954.7In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The dell_uart_bl_seCVE-2025-216965.5In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap() When mremap()ing a memory CVE-2025-216975.5In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Ensure job pointer is set to NULL after job completion After CVE-2025-216995.5In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag TruncatCVE-2025-21707.2A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific condCVE-2025-217007.8In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to anotheCVE-2025-217014.7In the Linux kernel, the following vulnerability has been resolved: net: avoid race between device unregistration and ethnl ops The followCVE-2025-217027.0In the Linux kernel, the following vulnerability has been resolved: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Expected behaCVE-2025-217037.8In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() qdisc_treCVE-2025-217047.8In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the CVE-2025-217055.5In the Linux kernel, the following vulnerability has been resolved: mptcp: handle fastopen disconnect correctly Syzbot was able to triggerCVE-2025-217065.5In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-
CVE-2025-21694: Medium severity, CVSS 5.5 | Vulnix