CVE-2025-40242

gfs2: Fix unlikely race in gdlm_put_lock

State: Published
Severity: 7.0 High
Published: Dec 4, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix unlikely race in gdlm_put_lock

In gdlm_put_lock(), there is a small window of time in which the DFL_UNMOUNT flag has been set but the lockspace hasn't been released, yet. In that window, dlm may still call gdlm_ast() and gdlm_bast(). To prevent it from dereferencing freed glock objects, only free the glock if the lockspace has actually been released.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d1340f80f0b8066321b499a376780da00560e857 to before 5fdc1474e678eea1700aa266c0b7c2c96f81dd0dAffected d1340f80f0b8066321b499a376780da00560e857 to before 4913592a3358f6ec366b8346b733d5e2360b08e1Affected d1340f80f0b8066321b499a376780da00560e857 to before 279bde3bbb0ac0bad5c729dfa85983d75a5d7641Affected d1340f80f0b8066321b499a376780da00560e857 to before 64c61b4ac645222fa7b724cef616c1f862a72a40Affected d1340f80f0b8066321b499a376780da00560e857 to before 28c4d9bc0708956c1a736a9e49fee71b65deee81Affected 6aa628c45875e7b8cca81ed9447a12a0e8f3504aAffected a97e75203733be0a4263a78fb7b29352be150c1cAffected 3554b46204e67333e1fb8be0e93936fb08267c80Affected 5cff77b9827a956d076168b56775aad23bce87e4Affected 8deedce385d220f90e435f534d71d27526273515Affected 2225a5cd2fbc2ef0e0f78e585db3844f60416a39Affected 02e838963fdaa6ce8570b5389aecdc6cf1fb40b0Affected 01eb3106f43335fdc02111358dae80a5c3fd324dAffected 4.4.284 to before 4.5Affected 4.9.283 to before 4.10Affected 4.14.247 to before 4.15Affected 4.19.207 to before 4.20Affected 5.4.148 to before 5.5Affected 5.10.67 to before 5.11Affected 5.13.19 to before 5.14Affected 5.14.6 to before 5.15Affected
LinuxLinux	5.15Affected before 5.15Not affected 6.1.168 through 6.1.Not affected 6.6.131 through 6.6.Not affected 6.12.56 through 6.12.Not affected 6.17.6 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

d1340f80f0b8066321b499a376780da00560e857 to before 5fdc1474e678eea1700aa266c0b7c2c96f81dd0dAffected
d1340f80f0b8066321b499a376780da00560e857 to before 4913592a3358f6ec366b8346b733d5e2360b08e1Affected
d1340f80f0b8066321b499a376780da00560e857 to before 279bde3bbb0ac0bad5c729dfa85983d75a5d7641Affected
d1340f80f0b8066321b499a376780da00560e857 to before 64c61b4ac645222fa7b724cef616c1f862a72a40Affected
d1340f80f0b8066321b499a376780da00560e857 to before 28c4d9bc0708956c1a736a9e49fee71b65deee81Affected
6aa628c45875e7b8cca81ed9447a12a0e8f3504aAffected
a97e75203733be0a4263a78fb7b29352be150c1cAffected
3554b46204e67333e1fb8be0e93936fb08267c80Affected
5cff77b9827a956d076168b56775aad23bce87e4Affected
8deedce385d220f90e435f534d71d27526273515Affected
2225a5cd2fbc2ef0e0f78e585db3844f60416a39Affected
02e838963fdaa6ce8570b5389aecdc6cf1fb40b0Affected
01eb3106f43335fdc02111358dae80a5c3fd324dAffected
4.4.284 to before 4.5Affected
4.9.283 to before 4.10Affected
4.14.247 to before 4.15Affected
4.19.207 to before 4.20Affected
5.4.148 to before 5.5Affected
5.10.67 to before 5.11Affected
5.13.19 to before 5.14Affected
5.14.6 to before 5.15Affected

LinuxLinux

5.15Affected
before 5.15Not affected
6.1.168 through 6.1.*Not affected
6.6.131 through 6.6.*Not affected
6.12.56 through 6.12.*Not affected
6.17.6 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.