CVE-2025-40242: Linux

High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix unlikely race in gdlm_put_lock In gdlm_put_lock(), there is a small window of time in which the DFL_UNMOUNT flag has been set but the lockspace hasn't been released, yet. In that window, dlm may still call gdlm_ast() and gdlm_bast(). To prevent it from dereferencing freed glock objects, only free the glock if the lockspace has actually been released.

Affected products

• Linux Linux: from 4.4.284, before 4.5 (fixed in 4.5); from 4.9.283, before 4.10 (fixed in 4.10); from 4.14.247, before 4.15 (fixed in 4.15); from 4.19.207, before 4.20 (fixed in 4.20); from 5.4.148, before 5.5 (fixed in 5.5); from 5.10.67, before 5.11 (fixed in 5.11); …

Published 2025-12-04. Last modified 2026-07-30.