CVE-2025-40242

Summary

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix unlikely race in gdlm_put_lock

In gdlm_put_lock(), there is a small window of time in which the DFL_UNMOUNT flag has been set but the lockspace hasn't been released, yet. In that window, dlm may still call gdlm_ast() and gdlm_bast(). To prevent it from dereferencing freed glock objects, only free the glock if the lockspace has actually been released.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd1340f80f0b8066321b499a376780da00560e857 < 5fdc1474e678eea1700aa266c0b7c2c96f81dd0daffected
LinuxLinuxd1340f80f0b8066321b499a376780da00560e857 < 4913592a3358f6ec366b8346b733d5e2360b08e1affected
LinuxLinuxd1340f80f0b8066321b499a376780da00560e857 < 279bde3bbb0ac0bad5c729dfa85983d75a5d7641affected
LinuxLinuxd1340f80f0b8066321b499a376780da00560e857 < 64c61b4ac645222fa7b724cef616c1f862a72a40affected
LinuxLinuxd1340f80f0b8066321b499a376780da00560e857 < 28c4d9bc0708956c1a736a9e49fee71b65deee81affected
LinuxLinux6aa628c45875e7b8cca81ed9447a12a0e8f3504aaffected
LinuxLinuxa97e75203733be0a4263a78fb7b29352be150c1caffected
LinuxLinux3554b46204e67333e1fb8be0e93936fb08267c80affected
LinuxLinux5cff77b9827a956d076168b56775aad23bce87e4affected
LinuxLinux8deedce385d220f90e435f534d71d27526273515affected
LinuxLinux2225a5cd2fbc2ef0e0f78e585db3844f60416a39affected
LinuxLinux02e838963fdaa6ce8570b5389aecdc6cf1fb40b0affected
LinuxLinux01eb3106f43335fdc02111358dae80a5c3fd324daffected
LinuxLinux4.4.284 < 4.5affected
LinuxLinux4.9.283 < 4.10affected
LinuxLinux4.14.247 < 4.15affected
LinuxLinux4.19.207 < 4.20affected
LinuxLinux5.4.148 < 5.5affected
LinuxLinux5.10.67 < 5.11affected
LinuxLinux5.13.19 < 5.14affected
LinuxLinux5.14.6 < 5.15affected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux6.1.168 <= 6.1.*unaffected
LinuxLinux6.6.131 <= 6.6.*unaffected
LinuxLinux6.12.56 <= 6.12.*unaffected
LinuxLinux6.17.6 <= 6.17.*unaffected
LinuxLinux6.18 <= *unaffected

Weaknesses

References