CVE-2025-40024

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where a race condition can occur within the vhost subsystem. Specifically, vhost task create() creates a task and maintains a reference to its task struct. If this task terminates prematurely due to a signal, its task struct is released. A subsequent call to vhost task wake() may then attempt to access this already released task struct, leading to a potential error. The resolution involves acquiring a reference to the task struct during thread creation and releasing it when the vhost task structure is removed, ensuring that vhost task wake() always accesses a valid task struct even if the task exits early.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.