CVE-2025-40305 — Deadlock in Linux
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 89.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 8
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
p9_read_work() doesn't set Rworksched and doesn't do schedule_work(m->rq)
if list_empty(&m->req_list).
However, if the pipe is full, we need to read more data and this used to
work prior to commit aaec5a95d59615 ("pipe_read: don't wake up the writer
if the pipe is still full").
p9_read_work() does p9_fd_read() -> ... -> anon_pipe_read() which (before
the commit above) tri…
Affected Packages7 packages
▶CVEListV5linux/linuxaaec5a95d59615523db03dd53c2052f0a87beea7 — 242531004d7de8c159f9bfadebe33fe8060b1046+2