{"id":"CVE-2025-40242","title":"gfs2: Fix unlikely race in gdlm_put_lock","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Fix unlikely race in gdlm_put_lock\n\nIn gdlm_put_lock(), there is a small window of time in which the\nDFL_UNMOUNT flag has been set but the lockspace hasn't been r…","severity":"high","cvss":7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= d1340f80f0b8066321b499a376780da00560e857 < 5fdc1474e678eea1700aa266c0b7c2c96f81dd0d","Linux >= d1340f80f0b8066321b499a376780da00560e857 < 4913592a3358f6ec366b8346b733d5e2360b08e1","Linux >= d1340f80f0b8066321b499a376780da00560e857 < 279bde3bbb0ac0bad5c729dfa85983d75a5d7641","Linux >= d1340f80f0b8066321b499a376780da00560e857 < 64c61b4ac645222fa7b724cef616c1f862a72a40","Linux >= d1340f80f0b8066321b499a376780da00560e857 < 28c4d9bc0708956c1a736a9e49fee71b65deee81","Linux 6aa628c45875e7b8cca81ed9447a12a0e8f3504a","Linux a97e75203733be0a4263a78fb7b29352be150c1c","Linux 3554b46204e67333e1fb8be0e93936fb08267c80","Linux 5cff77b9827a956d076168b56775aad23bce87e4","Linux 8deedce385d220f90e435f534d71d27526273515","Linux 2225a5cd2fbc2ef0e0f78e585db3844f60416a39","Linux 02e838963fdaa6ce8570b5389aecdc6cf1fb40b0","Linux 01eb3106f43335fdc02111358dae80a5c3fd324d","Linux >= 4.4.284 < 4.5","Linux >= 4.9.283 < 4.10","Linux >= 4.14.247 < 4.15","Linux >= 4.19.207 < 4.20","Linux >= 5.4.148 < 5.5","Linux >= 5.10.67 < 5.11","Linux >= 5.13.19 < 5.14","Linux >= 5.14.6 < 5.15","Linux 5.15"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:58:20.770505Z"},"published":"2025-12-04","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:02:41.268Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-40242","references":[{"url":"https://git.kernel.org/stable/c/5fdc1474e678eea1700aa266c0b7c2c96f81dd0d"},{"url":"https://git.kernel.org/stable/c/4913592a3358f6ec366b8346b733d5e2360b08e1"},{"url":"https://git.kernel.org/stable/c/279bde3bbb0ac0bad5c729dfa85983d75a5d7641"},{"url":"https://git.kernel.org/stable/c/64c61b4ac645222fa7b724cef616c1f862a72a40"},{"url":"https://git.kernel.org/stable/c/28c4d9bc0708956c1a736a9e49fee71b65deee81"}],"tags":["cve.org"],"epss":0.00145,"epssPercentile":0.03368,"ingestedAt":"2026-10-15T22:48:25.552Z","slug":"CVE-2025-40242","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Fix unlikely race in gdlm_put_lock\n\nIn gdlm_put_lock(), there is a small window of time in which the\nDFL_UNMOUNT flag has been set but the lockspace hasn't been released,\nyet.  In that window, dlm may still call gdlm_ast() and gdlm_bast().\nTo prevent it from dereferencing freed glock objects, only free the\nglock if the lockspace has actually been released.\n\n## Affected\n\n- `Linux >= d1340f80f0b8066321b499a376780da00560e857 < 5fdc1474e678eea1700aa266c0b7c2c96f81dd0d`\n- `Linux >= d1340f80f0b8066321b499a376780da00560e857 < 4913592a3358f6ec366b8346b733d5e2360b08e1`\n- `Linux >= d1340f80f0b8066321b499a376780da00560e857 < 279bde3bbb0ac0bad5c729dfa85983d75a5d7641`\n- `Linux >= d1340f80f0b8066321b499a376780da00560e857 < 64c61b4ac645222fa7b724cef616c1f862a72a40`\n- `Linux >= d1340f80f0b8066321b499a376780da00560e857 < 28c4d9bc0708956c1a736a9e49fee71b65deee81`\n- `Linux 6aa628c45875e7b8cca81ed9447a12a0e8f3504a`\n- `Linux a97e75203733be0a4263a78fb7b29352be150c1c`\n- `Linux 3554b46204e67333e1fb8be0e93936fb08267c80`\n- `Linux 5cff77b9827a956d076168b56775aad23bce87e4`\n- `Linux 8deedce385d220f90e435f534d71d27526273515`\n- `Linux 2225a5cd2fbc2ef0e0f78e585db3844f60416a39`\n- `Linux 02e838963fdaa6ce8570b5389aecdc6cf1fb40b0`\n- `Linux 01eb3106f43335fdc02111358dae80a5c3fd324d`\n- `Linux >= 4.4.284 < 4.5`\n- `Linux >= 4.9.283 < 4.10`\n- `Linux >= 4.14.247 < 4.15`\n- `Linux >= 4.19.207 < 4.20`\n- `Linux >= 5.4.148 < 5.5`\n- `Linux >= 5.10.67 < 5.11`\n- `Linux >= 5.13.19 < 5.14`\n- `Linux >= 5.14.6 < 5.15`\n- `Linux 5.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":38.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}