CVE-2025-21767

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where the clocksource verify choose cpus() function is invoked with preemption disabled, leading to the acquisition of sleeping locks in atomic context. This occurs because get random u32() is called to obtain random numbers, which can acquire the batched entropy 32 local lock and/or the base crng.lock spinlock. In PREEMPT RT kernels, these locks are sleeping locks and cannot be acquired in atomic context, resulting in a bug report.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.