Improper locking in Linux kernel - CVE-2025-39843

Vulnerability identifier: #VU115992

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-39843

CWE-ID: CWE-667

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the get_track(), set_track_update(), free_debug_processing(), ___slab_alloc() and free_to_partial_list() functions in mm/slub.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
Debian Linux
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Ubuntu
openEuler
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
kernel (Red Hat package)
kernel-zfcpdump-devel (Red Hat package)
kernel-rt-64k-debuginfo (Red Hat package)
kernel-zfcpdump-devel-matched (Red Hat package)
perf-debuginfo (Red Hat package)
kernel-debuginfo-common-ppc64le (Red Hat package)
kernel-64k (Red Hat package)
kernel-64k-core (Red Hat package)
kernel-64k-debug (Red Hat package)
kernel-64k-debug-core (Red Hat package)
kernel-64k-debug-debuginfo (Red Hat package)
kernel-64k-debug-devel (Red Hat package)
kernel-64k-debug-devel-matched (Red Hat package)
kernel-64k-debug-modules (Red Hat package)
kernel-64k-debug-modules-extra (Red Hat package)
kernel-64k-debuginfo (Red Hat package)
kernel-64k-devel (Red Hat package)
kernel-64k-devel-matched (Red Hat package)
kernel-64k-modules-extra (Red Hat package)
kernel-debuginfo-common-aarch64 (Red Hat package)
kernel-rt-64k-debug-debuginfo (Red Hat package)
kernel-debuginfo-common-s390x (Red Hat package)
kernel-debug-debuginfo (Red Hat package)
kernel-debug-devel (Red Hat package)
kernel-debug-devel-matched (Red Hat package)
kernel-debuginfo (Red Hat package)
kernel-debuginfo-common-x86_64 (Red Hat package)
kernel-devel (Red Hat package)
kernel-devel-matched (Red Hat package)
kernel-headers (Red Hat package)
kernel-rt-debuginfo (Red Hat package)
kernel-tools-debuginfo (Red Hat package)
libperf-debuginfo (Red Hat package)
perf (Red Hat package)
python3-perf (Red Hat package)
python3-perf-debuginfo (Red Hat package)
rtla (Red Hat package)
rv (Red Hat package)
kernel-zfcpdump-debuginfo (Red Hat package)
linux (Debian package)
python3-perf-debuginfo
kernel
bpftool
bpftool-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-headers
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python3-perf
kernel-source
kernel-extra-modules
linux (Ubuntu package)
linux-aws-fips (Ubuntu package)
linux-xilinx (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-aws-6.8 (Ubuntu package)
linux-raspi (Ubuntu package)
linux-azure (Ubuntu package)
linux-azure-6.8 (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-realtime (Ubuntu package)

Install update from vendor's repository.

kernel (Red Hat package) - addressed in versions 5.14.0-570.76.1.el9_6, 5.14.0-611.9.1.el9_7, 6.12.0-55.52.1.el10_0, 6.12.0-124.27.1.el10_1
kernel-zfcpdump-devel (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-rt-64k-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-zfcpdump-devel-matched (Red Hat package) - update to 5.14.0-611.9.1.el9_7
perf-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-debuginfo-common-ppc64le (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-core (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-debug (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-debug-core (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-debug-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-debug-devel (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-debug-devel-matched (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-debug-modules (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-debug-modules-extra (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-devel (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-devel-matched (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-64k-modules-extra (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-debuginfo-common-aarch64 (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-rt-64k-debug-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-debuginfo-common-s390x (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-debug-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-debug-devel (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-debug-devel-matched (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-debuginfo-common-x86_64 (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-devel (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-devel-matched (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-headers (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-rt-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-tools-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
libperf-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
perf (Red Hat package) - update to 5.14.0-611.9.1.el9_7
python3-perf (Red Hat package) - update to 5.14.0-611.9.1.el9_7
python3-perf-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
rtla (Red Hat package) - update to 5.14.0-611.9.1.el9_7
rv (Red Hat package) - update to 5.14.0-611.9.1.el9_7
kernel-zfcpdump-debuginfo (Red Hat package) - update to 5.14.0-611.9.1.el9_7
linux (Debian package) - addressed in versions 6.1.153-1, 6.12.48-1
python3-perf-debuginfo - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
bpftool - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
bpftool-debuginfo - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-debuginfo - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-debugsource - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-devel - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-headers - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-tools - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-tools-debuginfo - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-tools-devel - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
perf - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
perf-debuginfo - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
python3-perf - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-source - addressed in versions 6.6.0-139.0.0.120, 6.6.0-139.0.0.133
kernel-extra-modules - update to 6.6.0-139.0.0.133
linux (Ubuntu package) - addressed in versions 6.8.0-106.106, 6.8.0-106.106.1, 6.8.0-106.106.1~22.04.1, 6.8.0-106.106~22.04.1, 6.8.0-1035.38, 6.8.0-1047.48, 6.8.0-1047.48~22.04.1, 6.8.0-1048.53, 6.8.0-1049.49, 6.8.0-1049.49~22.04.1, 6.8.0-1050.53, 6.8.0-1052.55, 6.8.0-1052.55~22.04.1
linux-aws-fips (Ubuntu package) - addressed in versions 6.8.0-106.106+fips1, 6.8.0-1050.53+fips1, 6.8.0-1052.55+fips1
linux-xilinx (Ubuntu package) - update to 6.8.0-1029.30
linux-nvidia (Ubuntu package) - addressed in versions 6.8.0-1049.52, 6.8.0-1049.52.1, 6.8.0-1049.52~22.04.1
linux-aws-6.8 (Ubuntu package) - update to 6.8.0-1050.53~22.04.1
linux-raspi (Ubuntu package) - addressed in versions 6.8.0-1050.54, 6.8.0-2040.41
linux-azure (Ubuntu package) - update to 6.8.0-1051.57
linux-azure-6.8 (Ubuntu package) - update to 6.8.0-1051.57~22.04.1
linux-azure-fips (Ubuntu package) - update to 6.8.0-1052.58+fips1
linux-realtime (Ubuntu package) - addressed in versions 6.8.1-1045.46, 6.8.1-1045.46~22.04.1

• https://git.kernel.org/stable/c/243b705a90ed8449f561a271cf251fd2e939f3db
• https://git.kernel.org/stable/c/522ffe298627cfe72539d72167c2e20e72b5e856
• https://git.kernel.org/stable/c/850470a8413a8a78e772c4f6bd9fe81ec6bd5b0f
• https://git.kernel.org/stable/c/994b03b9605d36d814c611385fbf90ca6db20aa8
• https://git.kernel.org/stable/c/eb3240ffd243bfb8b1e9dc568d484ecf9fd660ab

• Improper locking in Linux kernel mm
• Debian update for linux
• Debian update for linux
• Red Hat Enterprise Linux 9 update for kernel
• Red Hat Enterprise Linux 9 update for kernel
• Red Hat Enterprise Linux 10 update for kernel
• Red Hat Enterprise Linux 10 update for kernel
• openEuler 24.03 LTS SP2 update for kernel
• openEuler 24.03 LTS SP1 update for kernel
• openEuler 24.03 LTS update for kernel
• Ubuntu update for linux
• Ubuntu update for linux-aws-fips
• Ubuntu update for linux-nvidia
• Ubuntu update for linux-realtime
• Ubuntu update for linux-aws-6.8
• Ubuntu update for linux-azure-6.8
• Ubuntu update for linux-azure
• Ubuntu update for linux-raspi
• Ubuntu update for linux-azure-fips
• Ubuntu update for linux-xilinx