CVE-2025-40061 — Incorrect Synchronization in Linux
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 92.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 28
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix race in do_task() when draining
When do_task() exhausts its iteration budget (!ret), it sets the state
to TASK_STATE_IDLE to reschedule, without a secondary check on the
current task->state. This can overwrite the TASK_STATE_DRAINING state
set by a concurrent call to rxe_cleanup_task() or rxe_disable_task().
While state changes are protected by a spinlock, both rxe_cleanup_task()
and rxe_disable_task() release t…
Affected Packages6 packages
▶CVEListV5linux/linux9b4b7c1f9f54120940e243251e2b1407767b3381 — 85288bcf7ffe11e7b036edf91937bc62fd384076+4