CVE-2025-40024 — Linux vulnerability
24 documents7 sources
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 92.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 24
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
vhost: Take a reference on the task in struct vhost_task.
vhost_task_create() creates a task and keeps a reference to its
task_struct. That task may exit early via a signal and its task_struct
will be released.
A pending vhost_task_wake() will then attempt to wake the task and
access a task_struct which is no longer there.
Acquire a reference on the task_struct while creating the thread and
release the reference while the str…
Affected Packages6 packages
▶CVEListV5linux/linuxf9010dbdce911ee1f1af1398a24b1f9f992e0080 — 82a1463c968b1a6ae598a4f2fcef17b71bb7d3a0+4