CVE-2025-37880

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-37880
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37880.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-37880
Downstream
Published
2025-05-09T07:16:09Z
Modified
2025-08-30T18:01:35Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

um: work around sched_yield not yielding in time-travel mode

schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace spinlock in ASAN. Unfortunately, with time-travel it causes an extreme slowdown or even deadlock depending on the kernel configuration (CONFIGUMLMAXUSERSPACE_ITERATIONS).

Work around it by accounting time to the process whenever it executes a sched_yield syscall.

References

Affected packages