|
Vulnerabilities
< Back

CVE-2025-40361

Updated on 16 Dec 2025

Severity

5.5 Medium severity

Details

CVSS score
5.5
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

A flaw was found in the Linux kernel’s ext4 filesystem component. A local user could potentially trigger a deadlock due to inconsistent memory allocation flags in the ext4_xattr_inode_cache_find function, which could lead to a Denial of Service (DoS). However, this CVE has been rejected by the assigning CNA.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Amazon Linux 2023 Planned —
Debian 12 Released
32 kernels
  • 6.1.38-1
  • 6.1.38-2
  • 6.1.38-4
  • 6.1.52-1
  • 6.1.55-1
  • 6.1.64-1
  • 6.1.66-1
  • 6.1.69-1
  • 6.1.76-1
  • 6.1.27-1
  • 6.1.67-1
  • 6.1.85-1
  • 6.1.90-1
  • 6.1.94-1
  • 6.1.99-1
  • 6.1.106-3
  • 6.1.112-1
  • 6.1.115-1
  • 6.1.119-1
  • 6.1.123-1
  • 6.1.128-1
  • 6.1.124-1
  • 6.1.129-1
  • 6.1.133-1
  • 6.1.135-1
  • 6.1.137-1
  • 6.1.140-1
  • 6.1.139-1
  • 6.1.147-1
  • 6.1.148-1
  • 6.1.153-1
  • 6.1.158-1
Oracle Linux 8 UEK 7 Planned —
Oracle Linux 9 UEK 7 Planned —