PT-2025-49780 · Linux+2 · Linux Kernel+2

Published

2025-12-09

·

Updated

2026-02-24

·

CVE-2025-40327

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel’s perf/core component related to cpu-clock usage. Specifically, the use of cpu-clock by the async-profiler tool can lead to a system hang. This issue stems from a recursion within the hrtimer code when attempting to stop cpu-clock events, triggered by the perf event overflow() callback within the hrtimer handler. The problematic commit identified as introducing this issue is 18dbcbfabfff ("perf: Fix the POLL HUP delivery breakage"). The fix involves using hrtimer try to cancel() and setting the PERF HES STOPPED flag to safely stop the event.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2025-40327
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu