PT-2025-40649 · Systemd+6 · Systemd+6
Published
2025-10-04
·
Updated
2026-05-07
·
CVE-2025-39953
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A hung task can occur during cgroup testing when repeatedly mounting/unmounting perf event and net prio controllers with systemd.unified cgroup hierarchy=1. The hang manifests in
cgroup lock and drain offline() during root destruction. The root cause is a deadlock situation where root destruction waits for offline completion, but offline work is blocked behind root destruction in cgroup destroy wq due to a limited number of active workers. The issue arises when a dying perf event CSS gets queued for offline after root destruction. The solution involves splitting cgroup destroy wq into three dedicated workqueues: cgroup offline wq, cgroup release wq, and cgroup free wq. This separation eliminates blocking in the CSS free path while waiting for offline operations to complete.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu
Net Prio
Perf Event
Systemd