Not yet scoredPublished Oct 24, 2025

CVE-2025-40021tracing: dynevent: Add a missing lockdown check on dynevent

Updated under an hour ago (Oct 28, 2026, 6:23 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown status and reject if it is set.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 before f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf; 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 builds before 0d41604d2d53c1abe27fefb54b37a8f6642a4d74; 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 builds before 07b1f63b5f86765793fab44d3d4c2be681cddafb; 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 builds before 3887f3814c0e770e6b73567fe0f83a2c01a6470c; 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 builds before 573b1e39edfcb7b4eecde0f1664455a1f4462eee; from 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 before b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb; 17911ff38aa58d3c95c07589dbf5d3564c4cf3c5 builds before 456c32e3c4316654f95f9d49c12cbecfb77d5660	CNA record

References

References

https://git.kernel.org/stable/c/f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf
https://git.kernel.org/stable/c/0d41604d2d53c1abe27fefb54b37a8f6642a4d74
https://git.kernel.org/stable/c/07b1f63b5f86765793fab44d3d4c2be681cddafb
https://git.kernel.org/stable/c/3887f3814c0e770e6b73567fe0f83a2c01a6470c
https://git.kernel.org/stable/c/573b1e39edfcb7b4eecde0f1664455a1f4462eee
https://git.kernel.org/stable/c/b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb
https://git.kernel.org/stable/c/456c32e3c4316654f95f9d49c12cbecfb77d5660

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.