---
id: CVE-2025-40242
title: 'gfs2: Fix unlikely race in gdlm_put_lock'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  gfs2: Fix unlikely race in gdlm_put_lock

  In gdlm_put_lock(), there is a small window of time in which the
  DFL_UNMOUNT flag has been set but the lockspace hasn't been r…
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d1340f80f0b8066321b499a376780da00560e857 <
    5fdc1474e678eea1700aa266c0b7c2c96f81dd0d
  - >-
    Linux >= d1340f80f0b8066321b499a376780da00560e857 <
    4913592a3358f6ec366b8346b733d5e2360b08e1
  - >-
    Linux >= d1340f80f0b8066321b499a376780da00560e857 <
    279bde3bbb0ac0bad5c729dfa85983d75a5d7641
  - >-
    Linux >= d1340f80f0b8066321b499a376780da00560e857 <
    64c61b4ac645222fa7b724cef616c1f862a72a40
  - >-
    Linux >= d1340f80f0b8066321b499a376780da00560e857 <
    28c4d9bc0708956c1a736a9e49fee71b65deee81
  - Linux 6aa628c45875e7b8cca81ed9447a12a0e8f3504a
  - Linux a97e75203733be0a4263a78fb7b29352be150c1c
  - Linux 3554b46204e67333e1fb8be0e93936fb08267c80
  - Linux 5cff77b9827a956d076168b56775aad23bce87e4
  - Linux 8deedce385d220f90e435f534d71d27526273515
  - Linux 2225a5cd2fbc2ef0e0f78e585db3844f60416a39
  - Linux 02e838963fdaa6ce8570b5389aecdc6cf1fb40b0
  - Linux 01eb3106f43335fdc02111358dae80a5c3fd324d
  - Linux >= 4.4.284 < 4.5
  - Linux >= 4.9.283 < 4.10
  - Linux >= 4.14.247 < 4.15
  - Linux >= 4.19.207 < 4.20
  - Linux >= 5.4.148 < 5.5
  - Linux >= 5.10.67 < 5.11
  - Linux >= 5.13.19 < 5.14
  - Linux >= 5.14.6 < 5.15
  - Linux 5.15
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:58:20.770505Z'
published: '2025-12-04'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:02:41.268Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-40242'
references:
  - url: 'https://git.kernel.org/stable/c/5fdc1474e678eea1700aa266c0b7c2c96f81dd0d'
  - url: 'https://git.kernel.org/stable/c/4913592a3358f6ec366b8346b733d5e2360b08e1'
  - url: 'https://git.kernel.org/stable/c/279bde3bbb0ac0bad5c729dfa85983d75a5d7641'
  - url: 'https://git.kernel.org/stable/c/64c61b4ac645222fa7b724cef616c1f862a72a40'
  - url: 'https://git.kernel.org/stable/c/28c4d9bc0708956c1a736a9e49fee71b65deee81'
tags:
  - cve.org
epss: 0.00145
epssPercentile: 0.03368
ingestedAt: '2026-10-15T22:48:25.552Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix unlikely race in gdlm_put_lock

In gdlm_put_lock(), there is a small window of time in which the
DFL_UNMOUNT flag has been set but the lockspace hasn't been released,
yet.  In that window, dlm may still call gdlm_ast() and gdlm_bast().
To prevent it from dereferencing freed glock objects, only free the
glock if the lockspace has actually been released.

## Affected

- `Linux >= d1340f80f0b8066321b499a376780da00560e857 < 5fdc1474e678eea1700aa266c0b7c2c96f81dd0d`
- `Linux >= d1340f80f0b8066321b499a376780da00560e857 < 4913592a3358f6ec366b8346b733d5e2360b08e1`
- `Linux >= d1340f80f0b8066321b499a376780da00560e857 < 279bde3bbb0ac0bad5c729dfa85983d75a5d7641`
- `Linux >= d1340f80f0b8066321b499a376780da00560e857 < 64c61b4ac645222fa7b724cef616c1f862a72a40`
- `Linux >= d1340f80f0b8066321b499a376780da00560e857 < 28c4d9bc0708956c1a736a9e49fee71b65deee81`
- `Linux 6aa628c45875e7b8cca81ed9447a12a0e8f3504a`
- `Linux a97e75203733be0a4263a78fb7b29352be150c1c`
- `Linux 3554b46204e67333e1fb8be0e93936fb08267c80`
- `Linux 5cff77b9827a956d076168b56775aad23bce87e4`
- `Linux 8deedce385d220f90e435f534d71d27526273515`
- `Linux 2225a5cd2fbc2ef0e0f78e585db3844f60416a39`
- `Linux 02e838963fdaa6ce8570b5389aecdc6cf1fb40b0`
- `Linux 01eb3106f43335fdc02111358dae80a5c3fd324d`
- `Linux >= 4.4.284 < 4.5`
- `Linux >= 4.9.283 < 4.10`
- `Linux >= 4.14.247 < 4.15`
- `Linux >= 4.19.207 < 4.20`
- `Linux >= 5.4.148 < 5.5`
- `Linux >= 5.10.67 < 5.11`
- `Linux >= 5.13.19 < 5.14`
- `Linux >= 5.14.6 < 5.15`
- `Linux 5.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.