CVE-2025-40348

In the Linux kernel, the following vulnerability has been resolved: slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts If two competing threads enter alloc_slab_obj_exts() and one of them fails to allocate the object extension vector, it might override the valid slab->obj_exts allocated by the other thread with OBJEXTS_ALLOC_FAIL. This will cause the thread that lost this race and expects a valid pointer to dereference a NULL pointer later on. Update slab->obj_exts atomically using cmpxchg() to avoid slab->obj_exts overrides by racing threads. Thanks for Vlastimil and Suren's help with debugging.

Package Linux Kernel
Published 2025-12-16
Last modified 2026-04-15
Patch available
Not yet patched

Affected versions

Linux kernel versions 6.12.54, 6.17.4 and later are affected. No fixed version recorded yet.

Affected from
≥ 6.12.54 ≥ 6.17.4

References

The following references provide additional information about CVE-2025-40348 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

Back to
All CVEs
View on
NVD / NIST