Search/CVE-2025-21862
● CVE — Medium

CVE-2025-21862

VendorlinuxProductlinux kernelDiscoveredMar 12, 2025UpdatedMay 12, 2026

In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock bad magic on CPU#1, syz-executor.0/7995 lock: 0xffff88805303f3e0, .magic: 00000000, .owner: /-1, .owner_cpu: 0 CPU: 1 PID: 7995 Comm: syz-executor.0 Tainted: G E 5.10.209+ #1 Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x119/0x179 lib/dump_stack.c:118 debug_spin_lock_before kernel/locking/spinlock_debug.c:83 [inline] do_raw_spin_lock+0x1f6/0x270 kernel/locking/spinlock_debug.c:112 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:117 [inline] _raw_spin_lock_irqsave+0x50/0x70…

CVSS v3.1
5.5 MEDIUM
EPSS
0.25%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
3
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 26, 2026
▲ 0.02pp
0.24% → 0.25% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Connections
5 relationships
Timeline
disclosure → media coverage
Mar 12, 2025
Disclosure — published as a CVE record. · last revised by NVD May 12, 2026
Aug 19, 2025
ubuntu.com reports: USN-7703-1: Linux kernel vulnerabilities
Aug 20, 2025
ubuntu.com reports: USN-7703-2: Linux kernel vulnerabilities
Aug 26, 2025
ubuntu.com reports: USN-7719-1: Linux kernel (Raspberry Pi Real-time) vulnerabilities