Linux · Linux Kernel · CVE-2025-39698
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
The `io futex wait()` function in the Linux kernel does not properly clean up resources on failure. Specifically, the `io futex data` is allocated but the corresponding flag indicating its validity is not always set, and the data is not cleared in the error path after being freed. This can lead to issues with resource management. The issue was reported by Trend Micro Zero Day Initiative and ReDress.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.