Race Condition in Linux Kernel Affecting Lockspace Management

CVE-2025-40242

What is CVE-2025-40242?

A vulnerability exists in the Linux kernel related to a race condition in the gdlm_put_lock function, where a timing issue can arise following the setting of the DFL_UNMOUNT flag. During this brief interval, the lockspace may not yet be fully released, leading to potential dereferencing of freed glock objects. This issue could jeopardize system stability by resulting in undefined behavior. The implementation has been revised to ensure that glock objects are only freed after confirming the lockspace has been completely released.

References