CVE-2025-40024
- Source
- https://cve.org/CVERecord?id=CVE-2025-40024
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40024.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-40024
- Downstream
- Related
- Published
- 2025-10-24T12:24:59.199Z
- Modified
- 2026-03-11T07:45:16.905609228Z
- Summary
- vhost: Take a reference on the task in struct vhost_task.
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
vhost: Take a reference on the task in struct vhost_task.
vhosttaskcreate() creates a task and keeps a reference to its taskstruct. That task may exit early via a signal and its taskstruct will be released. A pending vhosttaskwake() will then attempt to wake the task and access a task_struct which is no longer there.
Acquire a reference on the taskstruct while creating the thread and release the reference while the struct vhosttask itself is removed. If the task exits early due to a signal, then the vhosttaskwake() will still access a valid task_struct. The wake is safe and will be skipped in this case.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40024.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/7ce635b3d3aba43296b62b5a2d97c008bc51cbd2
- https://git.kernel.org/stable/c/82a1463c968b1a6ae598a4f2fcef17b71bb7d3a0
- https://git.kernel.org/stable/c/afe16653e05db07d658b55245c7a2e0603f136c0
- https://git.kernel.org/stable/c/d2be773a92874a070215b51b730cb2b1eaa8fae2
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40024.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-40024
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedf9010dbdce911ee1f1af1398a24b1f9f992e0080Fixed82a1463c968b1a6ae598a4f2fcef17b71bb7d3a0Fixedd2be773a92874a070215b51b730cb2b1eaa8fae2Fixed7ce635b3d3aba43296b62b5a2d97c008bc51cbd2Fixedafe16653e05db07d658b55245c7a2e0603f136c0