CVE-2025-37802CWE-667

CVE-2025-37802

High · published May 8, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"

wait_event_timeout() will set the state of the current

task to TASK_UNINTERRUPTIBLE, before doing the condition check. This

means that ksmbd_durable_scavenger_alive() will try to acquire the mutex

while already in a sleeping state. The scheduler warns us by giving

the following warning:

do not call blocking ops when !TASK_RUNNING; state=2 set at

[<0000000061515a6f>] prepare_to_wait_event+0x9f/0x6c0

WARNING: CPU: 2 PID: 4147 at kernel/sched/core.c:10099 __might_sleep+0x12f/0x160

mutex lock is not needed in ksmbd_durable_scavenger_alive().

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00358 · 28.3th percentile
Weakness
CWE-667 · Improper Locking
Published
2025-05-08T11:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel< 6.12.266.12.26
linux/linux_kernel≥ 6.13, < 6.14.56.14.5
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 08 MAY 06:26Z
    ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
    cvelistv5