Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-e6vj-e821-s7ba
Vulnerability ID VCID-e6vj-e821-s7ba
Aliases CVE-2025-21655
Summary kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
Status Published
Exploitability 0.5
Weighted Severity 2.4
Risk 1.2
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
System Score Found at
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2025-21655
cvssv3.1 4.7 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-21655.json
https://api.first.org/data/v1/epss?cve=CVE-2025-21655
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21655
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2338998 https://bugzilla.redhat.com/show_bug.cgi?id=2338998
RHSA-2025:20095 https://access.redhat.com/errata/RHSA-2025:20095
USN-7379-1 https://usn.ubuntu.com/7379-1/
USN-7379-2 https://usn.ubuntu.com/7379-2/
USN-7380-1 https://usn.ubuntu.com/7380-1/
USN-7381-1 https://usn.ubuntu.com/7381-1/
USN-7382-1 https://usn.ubuntu.com/7382-1/
USN-7513-1 https://usn.ubuntu.com/7513-1/
USN-7513-2 https://usn.ubuntu.com/7513-2/
USN-7513-3 https://usn.ubuntu.com/7513-3/
USN-7513-4 https://usn.ubuntu.com/7513-4/
USN-7513-5 https://usn.ubuntu.com/7513-5/
USN-7514-1 https://usn.ubuntu.com/7514-1/
USN-7515-1 https://usn.ubuntu.com/7515-1/
USN-7515-2 https://usn.ubuntu.com/7515-2/
USN-7522-1 https://usn.ubuntu.com/7522-1/
USN-7523-1 https://usn.ubuntu.com/7523-1/
USN-7524-1 https://usn.ubuntu.com/7524-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.04878
EPSS Score 0.00018
Published At April 24, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:43:08.097237+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-21655.json 38.0.0