CVE-2025-40348
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
16/12/2025
Última modificación:
18/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts<br />
<br />
If two competing threads enter alloc_slab_obj_exts() and one of them<br />
fails to allocate the object extension vector, it might override the<br />
valid slab->obj_exts allocated by the other thread with<br />
OBJEXTS_ALLOC_FAIL. This will cause the thread that lost this race and<br />
expects a valid pointer to dereference a NULL pointer later on.<br />
<br />
Update slab->obj_exts atomically using cmpxchg() to avoid<br />
slab->obj_exts overrides by racing threads.<br />
<br />
Thanks for Vlastimil and Suren&#39;s help with debugging.



