PT-2025-44116 · Linux+4 · Linux Kernel+4
Published
2025-08-28
·
Updated
2026-05-07
·
CVE-2025-40048
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s uio hv generic driver related to interrupt mask handling. The driver incorrectly manages the interrupt mask, potentially causing hangs. Specifically, the driver attempts to set the interrupt mask, while the intended behavior is for user space to fully control it. This can lead to a race condition where an interrupt is missed, resulting in processes waiting indefinitely in a
pread() call. This issue can occur when the host adds a message to the inbound ring buffer without generating an interrupt, and the user space code subsequently sets the interrupt mask to 0, expecting an interrupt that never arrives. A similar race condition can occur if hv uio channel cb() sets the interrupt mask to 1 while user space is emptying the inbound ring buffer.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu