Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-40361

Опубликовано: 16 дек. 2025
Источник: redhat
CVSS3: 5.5

Описание

A flaw was found in the Linux kernel's ext4 filesystem component. A local user could potentially trigger a deadlock due to inconsistent memory allocation flags in the ext4_xattr_inode_cache_find function, which could lead to a Denial of Service (DoS). However, this CVE has been rejected by the assigning CNA.

Отчет

This CVE has been marked as Rejected by the assigning CNA.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelFix deferred
Red Hat Enterprise Linux 6kernelOut of support scope
Red Hat Enterprise Linux 7kernelFix deferred
Red Hat Enterprise Linux 7kernel-rtFix deferred
Red Hat Enterprise Linux 8kernelFix deferred
Red Hat Enterprise Linux 8kernel-rtFix deferred
Red Hat Enterprise Linux 9kernelFix deferred
Red Hat Enterprise Linux 9kernel-rtFix deferred

Показывать по

Дополнительная информация

Дефект:
CWE-833
https://bugzilla.redhat.com/show_bug.cgi?id=2422670kernel: Linux kernel: ext4 deadlock vulnerability (CVE Rejected)

5.5 Medium

CVSS3

Связанные уязвимости

ubuntu
3 месяца назад

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

nvd
3 месяца назад

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

github
3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock The parent function ext4_xattr_inode_lookup_create already uses GFP_NOFS for memory alloction, so the function ext4_xattr_inode_cache_find should use same gfp_flag.

oracle-oval
около 1 месяца назад

ELSA-2026-50113: Unbreakable Enterprise kernel security update (IMPORTANT)

oracle-oval
2 месяца назад

ELSA-2026-50006: Unbreakable Enterprise kernel security update (IMPORTANT)

5.5 Medium

CVSS3