Race Condition Vulnerability in Linux Kernel's Samba Implementation
CVE-2025-40090

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 30 October 2025

What is CVE-2025-40090?

A vulnerability exists in the Linux kernel's Samba implementation, specifically in the ksmbd component, where recursive locking issues in RPC handle list access can lead to hung connections. When a client opens a named pipe using the 'rpcclient' tool, the system may experience a deadlock. The root cause is due to improper management of locks, where the existing lock makes recursive calls problematic, effectively freezing the connection. It's essential for administrators to ensure they are using patched versions of the kernel to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch