CVE-2025-40231

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to a lock inversion deadlock between vsock register mutex and sk lock-AF VSOCK when the vsock linger() function is called. This issue stemmed from a commit that introduced vsock register mutex locking within the vsock assign transport() function, potentially leading to a circular dependency when vsock linger() attempts to acquire sk lock. The vsock assign transport() function can be called while holding sk lock, and vsock linger() calls sk wait event(), which temporarily releases and re-acquires sk lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.