PT-2025-49034 · Linux+3 · Linux Kernel+3
Published
2025-09-15
·
Updated
2026-05-07
·
CVE-2025-40220
CVSS v2.0
3.8
Low
| Vector | AV:L/AC:H/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw related to a livelock in synchronous file put operations from fuseblk workers. This issue can lead to a hang when running tests that involve opening a file, initiating numerous asynchronous input/output (AIO) writes, and closing the file descriptor before the writes are completed. The root cause is that the fuseblk server sends the FUSE RELEASE command synchronously, which can cause all fuse server threads to become blocked in delayed file put operations, preventing them from handling queued fuse commands. The issue occurs when AIO completion functions put the struct file, queuing a delayed fput to the fuse server task.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu