BPF Map Vulnerability in Linux Kernel
CVE-2025-21853
What is CVE-2025-21853?
A design flaw in the Linux kernel related to BPF maps has been identified. The issue arises from holding the freeze_mutex during the entire mmap operation, which is unnecessary and can lead to potential deadlocks. By only holding the mutex during writeability checks and then proceeding with the mmap logic allows for better performance and reduces the risk of deadlocks. Proper handling of the 'write active' count ensures that any errors encountered during mmap can be managed effectively.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Linux fc9702273e2edb90400a34b3be76f7b08fa3344b < 2ce31c97c219b4fe797749f950274f246eb88c49
Linux fc9702273e2edb90400a34b3be76f7b08fa3344b < 0d90d9e154144a3a80e9fc0eb9b21b7fc990f68f
Linux fc9702273e2edb90400a34b3be76f7b08fa3344b < 4759acbd44d24a69b7b14848012ec4201d6c5501
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved