CVE - CVE-2025-22029

CVE-ID
CVE-2025-22029	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: exec: fix the racy usage of fs_struct->in_exec check_unsafe_exec() sets fs->in_exec under cred_guard_mutex, then execve() paths clear fs->in_exec lockless. This is fine if exec succeeds, but if it fails we have the following race: T1 sets fs->in_exec = 1, fails, drops cred_guard_mutex T2 sets fs->in_exec = 1 T1 clears fs->in_exec T2 continues with fs->in_exec == 0 Change fs/exec.c to clear fs->in_exec with cred_guard_mutex held.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/753a620a7f8e134b444f89fe90873234e894e21a URL:https://git.kernel.org/stable/c/753a620a7f8e134b444f89fe90873234e894e21a MISC:https://git.kernel.org/stable/c/a6b5070721503fb6021ebed51c925ffc66b1c5ab URL:https://git.kernel.org/stable/c/a6b5070721503fb6021ebed51c925ffc66b1c5ab MISC:https://git.kernel.org/stable/c/af7bb0d2ca459f15cb5ca604dab5d9af103643f0 URL:https://git.kernel.org/stable/c/af7bb0d2ca459f15cb5ca604dab5d9af103643f0 MISC:https://git.kernel.org/stable/c/b519f2e5800fe2391b7545ba6889df795828e885 URL:https://git.kernel.org/stable/c/b519f2e5800fe2391b7545ba6889df795828e885 MISC:https://git.kernel.org/stable/c/e2d8e7bd3314485e0b3b08380c659b3d1d67ed6a URL:https://git.kernel.org/stable/c/e2d8e7bd3314485e0b3b08380c659b3d1d67ed6a
Assigning CNA
kernel.org
Date Record Created
20241229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)