In the Linux kernel, the following vulnerability has been resolved:

tracing: dynevent: Add a missing lockdown check on dynevent

Since dynamic_events interface on tracefs is compatible with
kprobe_events and uprobe_events, it should also check the lockdown
status and reject if it is set.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00068.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 affected
< f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf
17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 affected
< 0d41604d2d53c1abe27fefb54b37a8f6642a4d74
17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 affected
< 07b1f63b5f86765793fab44d3d4c2be681cddafb
17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 affected
< 3887f3814c0e770e6b73567fe0f83a2c01a6470c
17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 affected
< 573b1e39edfcb7b4eecde0f1664455a1f4462eee
17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 affected
< b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb
17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 affected
< 456c32e3c4316654f95f9d49c12cbecfb77d5660
Linux Linux affected
Version Status Constraints
5.4 affected
—
0 unaffected
< 5.4
5.10.245 unaffected
≤ 5.10.*
5.15.194 unaffected
≤ 5.15.*
6.1.155 unaffected
≤ 6.1.*
6.6.109 unaffected
≤ 6.6.*
6.12.50 unaffected
≤ 6.12.*
6.16.10 unaffected
≤ 6.16.*
6.17 unaffected
≤ *

No data.

No data.

Vendor Product Confidence Versions
Linux Linux Kernel — —

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4379-1 linux-6.1 security update
Debian DLA Debian DLA DLA-4404-1 linux security update
Debian DSA Debian DSA DSA-6053-1 linux security update
Ubuntu USN Ubuntu USN USN-8033-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-3 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8034-1 Linux kernel (NVIDIA Tegra) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-4 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-5 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8034-2 Linux kernel (NVIDIA Tegra IGX) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-6 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-7 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-8 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-8095-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8095-2 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8100-1 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-8095-3 Linux kernel (Real-time) vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/07b1f63b5f86765793fab44d3d4c2be681cddafb cve-icon cve-icon
https://git.kernel.org/stable/c/0d41604d2d53c1abe27fefb54b37a8f6642a4d74 cve-icon cve-icon
https://git.kernel.org/stable/c/3887f3814c0e770e6b73567fe0f83a2c01a6470c cve-icon cve-icon
https://git.kernel.org/stable/c/456c32e3c4316654f95f9d49c12cbecfb77d5660 cve-icon cve-icon
https://git.kernel.org/stable/c/573b1e39edfcb7b4eecde0f1664455a1f4462eee cve-icon cve-icon
https://git.kernel.org/stable/c/b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb cve-icon cve-icon
https://git.kernel.org/stable/c/f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025102403-CVE-2025-40021-fbe1@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-40021 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-40021 cve-icon
History

Mon, 27 Oct 2025 22:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Sat, 25 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Fri, 24 Oct 2025 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown status and reject if it is set.
Title tracing: dynevent: Add a missing lockdown check on dynevent
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-24T12:24:57.107Z

Reserved: 2025-04-16T07:20:57.152Z

Link: CVE-2025-40021

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-24T13:15:47.263

Modified: 2025-10-27T13:20:15.637

Link: CVE-2025-40021

cve-icon Redhat

Severity : Low

Publid Date: 2025-10-24T00:00:00Z

Links: CVE-2025-40021 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-27T22:12:55Z

Weaknesses

No weakness.