Use-After-Free Vulnerability in Linux Kernel Affecting Mutex Requeue Functionality
CVE-2025-39977
What is CVE-2025-39977?
A vulnerability within the Linux kernel allows for a potential use-after-free condition during mutex requeue operations. This occurs when a race condition is triggered between two threads, specifically during the execution of the futex_wait_requeue_pi() and futex_requeue() functions. This flaw can lead to synchronization issues, where the state of the futex queue may be inappropriately manipulated. To mitigate this, a specific reading of the task structure is recommended before any state updates are made in the futex queue, ensuring proper synchronization and preventing the use of invalid memory references.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Linux 07d91ef510fb16a2e0ca7453222105835b7ba3b8
Linux 07d91ef510fb16a2e0ca7453222105835b7ba3b8 < 348736955ed6ca6e99ca24b93b1d3fbfe352c181
Linux 07d91ef510fb16a2e0ca7453222105835b7ba3b8