01 Record

CVE-2025-21816

hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.20% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 10.5% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-27 20:04Z1 YR AGO

Last updated

2026-05-23 15:57Z5 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-664Improper Control of a Resource Through its LifetimePillar

Data version

5.2

Document digest

76db887f9c0b219b462181b5d5ad04487e80e4d0f6141fc631edbd8f651a2b14

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux75b5016ce325f1ef9c63e5398a1064cf8a7a7354 to < 82ac6adbbb2aad14548a71d5e2e37f4964a15e38, 53f408cad05bb987af860af22f4151e5a18e6ee8 to < 63815bef47ec25f5a125019ca480882481ee1553, 5c0930ccaad5a74d74e8b18b648c5eb21ed2fe94 to < e456a88bddae4030ba962447bb84be6669f2a0c1, 5c0930ccaad5a74d74e8b18b648c5eb21ed2fe94 to < 2aecec58e9040ce3d2694707889f9914a2374955, 5c0930ccaad5a74d74e8b18b648c5eb21ed2fe94 to < 53dac345395c0d2493cbc2f4c85fe38aef5b63f5, 9a2fc41acb69dd4e2a58d0c04346c3333c2341fc, 54d0d83a53508d687fd4a225f8aa1f18559562d0, 7f4c89400d2997939f6971c7981cc780a219e36b, 6fcbcc6c8e52650749692c7613cbe71bf601670d, 6.1.68 to < 6.1.141, 6.6.7 to < 6.6.93, 4.19.302 to < 4.20, 5.4.264 to < 5.5, 5.10.204 to < 5.11, 5.15.143 to < 5.16, 6.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/82ac6adbbb2aad14548a71d5e2e37f4964a15e38
git.kernel.orghttps://git.kernel.org/stable/c/63815bef47ec25f5a125019ca480882481ee1553
git.kernel.orghttps://git.kernel.org/stable/c/e456a88bddae4030ba962447bb84be6669f2a0c1
git.kernel.orghttps://git.kernel.org/stable/c/2aecec58e9040ce3d2694707889f9914a2374955
git.kernel.orghttps://git.kernel.org/stable/c/53dac345395c0d2493cbc2f4c85fe38aef5b63f5
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.147-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.15-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.15-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.