Linux Kernel Vulnerability in x86/mm Affects Multiple Distributions

CVE-2025-40174

What is CVE-2025-40174?

A vulnerability identified in the Linux kernel's x86/mm component can lead to improper handling of memory management across multi-core systems. Specifically, the lack of a memory barrier (smp_mb()) between loading the active memory context and updating the translation lookaside buffer (TLB) can cause synchronization issues. This can result in the system failing to recognize recent changes in TLB state, potentially leading to inconsistent memory operations and degraded performance. System integrity may be compromised if applications rely on the timely flushing of TLB entries during context switches.

References