Heimdall Security Logo

CVE-2025-40231

Vulnérabilité non évaluée dans Linux (Linux)

CVSS 0.0 · Non évaluée
EPSS 0.2%
Linux•Linux•Versions : <=6.1.*, <=6.12.*, <5.10.246, <251caee792a21eb0b781aab91362b422c945e162, <6.6.115, 6.1.146, 6.15.7, 0, 8667e8d0eb46bc54fdae30ba2f4786407d3d88eb, <b44182c116778feaa05da52a426aeb9da1878dcf, <5.15.196, ae2c712ba39c7007de63cb0c75b51ce1caaf1da5, 6.12.39, 36a439049b34cca0b3661276049b84a1f76cc21a, <f7c877e7535260cc7a21484c994e8ce7e8cb6780, 6.18, <=5.10.*, <=6.6.*, 5.10.240, <6.1.158, 9d24bb6780282b0255b9929abe5e8f98007e2c6e, 687aa0c5581b8d4aa87fd92973e4ee576b550cdf, 6.17.6, <ce4f856c64f0bc30e29302a0ce41f4295ca391c5, <42ed0784d11adebf748711e503af0eb9f1e6d81d, 6.16, 9ce53e744f18e73059d3124070e960f3aa9902bf, 7b73bddf54777fb62d4d8c7729d0affe6df04477, 6.6.99, 5.15.189, 6.1.158, 5.10.246, <09bba278ccde25a14b6e5088a9e65a8717d0cccf, 6.6.115, <6.16, <=*, <6.12.56, <=5.15.*, <=6.17.*, <a2a4346eea8b4cb75037dbcb20b98cb454324f80, 5.15.196, 6.12.56

Description

In the Linux kernel, the following vulnerability has been resolved: vsock: fix lock inversion in vsock_assign_transport() Syzbot reported a potential lock inversion deadlock between vsock_register_mutex and sk_lock-AF_VSOCK when vsock_linger() is called. The issue was introduced by commit 687aa0c5581b ("vsock: Fix transport_* TOCTOU") which added vsock_register_mutex locking in vsock_assign_transport() around the transport->release() call, that can call vsock_linger(). vsock_assign_transport() can be called with sk_lock held. vsock_linger() calls sk_wait_event() that temporarily releases and re-acquires sk_lock. During this window, if another thread hold vsock_register_mutex while trying to acquire sk_lock, a circular dependency is created. Fix this by releasing vsock_register_mutex before calling transport->release() and vsock_deassign_transport(). This is safe because we don't need to hold vsock_register_mutex while releasing the old transport, and we ensure the new transport won't disappear by obtaining a module reference first via try_module_get().

Gravité et risque d'exploitation

CVE-2025-40231 obtient un score CVSS de 0.0/10, soit une gravité non évaluée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.21 %, ce qui la place devant 10.2 % des CVE référencées.

Que faire ?

  • Vérifiez si Linux (versions <=6.1.*, <=6.12.*, <5.10.246, <251caee792a21eb0b781aab91362b422c945e162, <6.6.115, 6.1.146, 6.15.7, 0, 8667e8d0eb46bc54fdae30ba2f4786407d3d88eb, <b44182c116778feaa05da52a426aeb9da1878dcf, <5.15.196, ae2c712ba39c7007de63cb0c75b51ce1caaf1da5, 6.12.39, 36a439049b34cca0b3661276049b84a1f76cc21a, <f7c877e7535260cc7a21484c994e8ce7e8cb6780, 6.18, <=5.10.*, <=6.6.*, 5.10.240, <6.1.158, 9d24bb6780282b0255b9929abe5e8f98007e2c6e, 687aa0c5581b8d4aa87fd92973e4ee576b550cdf, 6.17.6, <ce4f856c64f0bc30e29302a0ce41f4295ca391c5, <42ed0784d11adebf748711e503af0eb9f1e6d81d, 6.16, 9ce53e744f18e73059d3124070e960f3aa9902bf, 7b73bddf54777fb62d4d8c7729d0affe6df04477, 6.6.99, 5.15.189, 6.1.158, 5.10.246, <09bba278ccde25a14b6e5088a9e65a8717d0cccf, 6.6.115, <6.16, <=*, <6.12.56, <=5.15.*, <=6.17.*, <a2a4346eea8b4cb75037dbcb20b98cb454324f80, 5.15.196, 6.12.56) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE