CVE-2025-40220

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to a livelock in synchronous file put operations from fuseblk workers. This issue can lead to a hang when running tests that involve opening a file, initiating numerous asynchronous input/output (AIO) writes, and closing the file descriptor before the writes are completed. The root cause is that the fuseblk server sends the FUSE RELEASE command synchronously, which can cause all fuse server threads to become blocked in delayed file put operations, preventing them from handling queued fuse commands. The issue occurs when AIO completion functions put the struct file, queuing a delayed fput to the fuse server task.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.