Race Condition in Linux Kernel's BPF Ring Buffer Implementation

CVE-2025-40319

What is CVE-2025-40319?

A race condition exists in the Linux kernel's BPF ring buffer where an irq_work can be queued in bpf_ringbuf_commit(), but the ring buffer may be freed before the work executes. This situation can lead to potential memory access violations as the irq_work thread could attempt to access memory that has already been freed. The issue is resolved by ensuring all pending irq_work is completed before the buffer is freed, thus maintaining system stability and preventing unexpected behaviors.

References