CVE-2025-40319: linux
Vulnerability summary
CVE-2025-40319 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 41 · Related 37Timeline
- 08-12-2025PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Sync pending IRQ work before freeing ring buffer Fix a race where irq_work can be queued in bpf_ringbuf_commit() but the ring buffer is freed before the work executes. In the syzbot reproducer, a BPF program attached to sched_switch triggers bpf_ringbuf_commit(), queuing an irq_work. If the ring buffer is freed before this work executes, the irq_work thread may accesses freed memory. Calling `irq_work_sync(&rb->work)` ensures that all pending irq_work complete before freeing the buffer.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.14%
Chance of exploitation in the next 30 days
Percentile
3%
Versus all other CVEs
30-day change
0.00 pp
From 0.14% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu141 products
- linux< 5.15.0-173.183 | < 6.8.0-106.106 | < 6.17.0-14.14
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1103.110 | < 6.8.0-1050.53 | < 6.17.0-1007.7
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.159-1 | < 6.12.63-1 | < 6.17.8-1
Linux1 product
- linux≥ 457f44363a8894135c85b7a9afd2bd8196db24ab, < 47626748a2a00068dbbd5836d19076637b4e235b | ≥ 457f44363a8894135c85b7a9afd2bd8196db24ab, < de2ce6b14bc3e565708a39bdba3ef9162aeffc72 | ≥ 457f44363a8894135c85b7a9afd2bd8196db24ab, < e1828c7a8d8135e21ff6adaaa9458c32aae13b11 | ≥ 457f44363a8894135c85b7a9afd2bd8196db24ab, < 6451141103547f4efd774e912418a3b4318046c6 | ≥ 457f44363a8894135c85b7a9afd2bd8196db24ab, < 10ca3b2eec384628bc9f5d8190aed9427ad2dde6 | ≥ 457f44363a8894135c85b7a9afd2bd8196db24ab, < 430e15544f11f8de26b2b5109c7152f71b78295e | ≥ 457f44363a8894135c85b7a9afd2bd8196db24ab, < 4e9077638301816a7d73fa1e1b4c1db4a7e3b59c | 5.8
3 vendors · 143 products
