Deadlock Vulnerability in Linux Kernel Affecting Queue Management

CVE-2025-40146

What is CVE-2025-40146?

A vulnerability in the Linux kernel related to queue management can potentially lead to a deadlock state. This issue arises when memory allocation and deallocation of sched_tags occur while the queue is frozen. Allocating memory prior to freezing the queue and freeing it afterward is necessary to avoid this long-standing problem. Proper mitigation of this issue is crucial to maintain stability in systems utilizing the Linux kernel.

References