Vulnerability in Linux

CVE-2025-40242

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix unlikely race in gdlm_put_lock In gdlm_put_lock(), there is a small window of time in which the DFL_UNMOUNT flag has been set but the lockspace hasn't been released, yet. In that window, dlm may still call gdlm_ast() and gdlm_bast(). To prevent it from dereferencing freed glock objects, only free the glock if the lockspace has actually been released.

EPSS: 0.002 (7.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Linux — versions 6.17.6, 5.15, 2225a5cd2fbc2ef0e0f78e585db3844f60416a39

References

Frequently asked questions

What is CVE-2025-40242?
CVE-2025-40242 is a high-severity vulnerability in Linux. CVSS score: 7.0/10. Published 2025-12-04.
How severe is CVE-2025-40242?
High severity. CVSS v3 base score is 7.0 out of 10.