CVE-2025-39737

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw in the mm/kmemleak component where the kmemleak do cleanup() function could lead to a soft lockup. This issue was observed on x86-64 systems with 16 GB of memory running a debug kernel with kmemleak enabled, particularly during hot unplug operations. The soft lockup occurred during the removal and deletion of a large number of kmemleak objects within a loop using a workqueue, due to the repeated acquisition and release of a raw spinlock.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.