CVE-2025-40242

CVE-2025-40242

High · published December 4, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix unlikely race in gdlm_put_lock

In gdlm_put_lock(), there is a small window of time in which the

DFL_UNMOUNT flag has been set but the lockspace hasn't been released,

yet. In that window, dlm may still call gdlm_ast() and gdlm_bast().

To prevent it from dereferencing freed glock objects, only free the

glock if the lockspace has actually been released.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00145 · 3.5th percentile
Published
2025-12-04T21:16Z
References (5)
EPSS history
Timeline
  • 04 DEC 15:31Z
    gfs2: Fix unlikely race in gdlm_put_lock
    cvelistv5