CVE-2025-40021
Published Oct 24, 2025
Modified Apr 15, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown status and reject if it is set.
Is your site exposed to CVE-2025-40021?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/07b1f63b5f86765793fab44d3d4c2be681cddafb
https://git.kernel.org/stable/c/0d41604d2d53c1abe27fefb54b37a8f6642a4d74
https://git.kernel.org/stable/c/3887f3814c0e770e6b73567fe0f83a2c01a6470c
https://git.kernel.org/stable/c/456c32e3c4316654f95f9d49c12cbecfb77d5660
https://git.kernel.org/stable/c/573b1e39edfcb7b4eecde0f1664455a1f4462eee
https://git.kernel.org/stable/c/b47c4e06687a5a7b6c6ef4bd303fcfe4430b26bb
https://git.kernel.org/stable/c/f3ac1f4eaba58e57943efa3e8b8d71fa7aab0abf
Frequently Asked Questions
What is CVE-2025-40021? +
In the Linux kernel, the following vulnerability has been resolved:
tracing: dynevent: Add a missing lockdown check on dynevent
Since dynamic_events interface on tracefs is compatible with
kprobe_events and uprobe_events, it should also check the lockdown
status and reject if it is set.
How do I check if I'm vulnerable to CVE-2025-40021? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.