Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N L 3.3 .0017 7.1 —
AFFECTED Product Versions Fixed Linux 317460317a02a1af512697e6e964298dedd8a163 – — Linux 6.9 – 6.12.17
TIMELINE Dec 29 Reserved by Linux Mar 12 Published (CNA: Linux) Jul 30 RESCORED — CVE-2025-21851 (Linux). CVSS 7.8 → 3.3 (NVD).
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix softlockup in arena_map_free on 64k page kernel On an aarch64 kernel with CONFIG_PAGE_SIZE_64KB=y, arena_htab tests cause a segmentation fault and soft lockup. The same failure is not observed with 4k pages on aarch64. It turns out arena_map_free() is calling apply_to_existing_page_range() with the address returned by bpf_arena_get_kern_vm_start(). If this address is not page-aligned the code ends up calling apply_to_pte_range() with that unaligned address causing soft lockup. Fix it by round up GUARD_SZ to PAGE_SIZE << 1 so that the division by 2 in bpf_arena_get_kern_vm_start() returns a page-aligned value.
| Date | Event | Detail |
|---|---|---|
| December 29, 2024 | Reserved | Reserved by Linux |
| March 12, 2025 | Published | Published (CNA: Linux) |
| July 30, 2026 | RESCORED | RESCORED — CVE-2025-21851 (Linux). CVSS 7.8 → 3.3 (NVD). |
Authoritative record: CVE-2025-21851 at cve.org
Vendors: linux
Weaknesses: CWE-667
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-21851 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.