CVE-2025-40039 — Race Condition in Linux
Severity
4.7MEDIUMNVD
EPSS
0.0%
top 95.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 28
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix race condition in RPC handle list access
The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd
session. Access to this list is intended to be protected by
'sess->rpc_lock' (an rw_semaphore). However, the locking implementation was
flawed, leading to potential race conditions.
In ksmbd_session_rpc_open(), the code incorrectly acquired only a read lock
before calling xa_store() and xa_erase(). Since t…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6
Affected Packages10 packages
▶CVEListV5linux/linuxa4348710a7267705b75692dc1a000920481d1d92 — 69674b029002b1d90b655f014bdf64f404efa54d+7
Patches
🔴Vulnerability Details
7📋Vendor Advisories
7🕵️Threat Intelligence
1Hackernews
▶