Linux Kernel Vulnerability in 9p/Trans_fd from Linux Foundation

CVE-2025-40305

What is CVE-2025-40305?

A vulnerability exists in the Linux kernel's 9p/trans_fd module, where the p9_read_work() function fails to set Rworksched and neglects to call schedule_work(m->rq) when the request list is empty. This issue arises from a change made in commit aaec5a95d59615, which optimized the pipe reading process. The resulting behavior leads to improper handling of conditions when pipes are full, potentially allowing for unintended data flow and processing errors. Adjustments are necessary to ensure that p9_fd_request() utilizes p9_poll_mux() correctly, improving reliability in data interactions.

References