CVE-2025-40047
BaseFortify
Publication date: 2025-10-28
Last updated on: 2025-10-30
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel involves the io_uring subsystem's wait queue handling. Specifically, the function io_waitid_wait() did not always remove its entry from the wait queue if a cancellation was in progress, which could cause a race condition with another invocation of the wait queue entry callback. The fix ensures that the wait queue entry is always pruned on a successful return to prevent this race condition.
How can this vulnerability impact me? :
The vulnerability could lead to race conditions in the kernel's io_uring wait queue handling, potentially causing unexpected behavior such as resource leaks, deadlocks, or kernel instability. This could impact system reliability and security depending on how io_uring is used.