CVE-2025-21846

In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In [1] it was reported that the acct(2) system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when pointing acc(2) to /sys/power/resume. At the point the where the write to this file happens the calling task has already exited and called exit_fs(). A lookup will thus trigger a NULL-deref when accessing current->fs. Reorganize the code so that the the final write happens from the workqueue but with the caller's credentials. This preserves the (strange) permission model and has almost no regression risk. This api should stop to exist though.

• CWE-476
• CWE-476

• https://git.kernel.org/stable/c/56d5f3eba3f5de0efdd556de4ef381e109b973a9Patch
• https://git.kernel.org/stable/c/5a59ced8ffc71973d42c82484a719c8f6ac8f7f7Patch
• https://git.kernel.org/stable/c/5c928e14a2ccd99462f2351ead627b58075bb736Patch
• https://git.kernel.org/stable/c/5d5b936cfa4b0d5670ca7420ef165a074bc008ebPatch
• https://git.kernel.org/stable/c/5ee8da9bea70dda492d61f075658939af33d8410Patch
• https://git.kernel.org/stable/c/8acbf4a88c6a98c8ed00afd1a7d1abcca9b4735ePatch
• https://git.kernel.org/stable/c/a8136afca090412a36429cb6c2543c714d9c0f84Patch
• https://git.kernel.org/stable/c/b03782ae707cc45e65242c7cddd8e28f1c22cde5Patch
• https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html

Published

Mar 12, 2025

Last Modified

Jul 14, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-21840In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21841In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21842In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21843In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21844In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21845In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21847In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21848In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21849In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-2185ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P…8.5
• CVE-2025-21850In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21851In the Linux kernel, the following vulnerability has been re…3.3