CVE-2025-39744 describes a vulnerability in the Linux kernel's RCU (Read-Copy-Update) mechanism, specifically within the rcu_read_unlock() function. This flaw can lead to a system lockup during the irq_exit() path if an Inter-Processor Interrupt (IPI) is issued, affecting Linux kernel versions. Rated with a CVSS score of 7.1 (HIGH), it has a local attack vector with low attack complexity, allowing an authenticated local attacker to cause a denial of service (system hang). While there are no known public exploits or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 6.6.103CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.12.43CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.13, < 6.15.11CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.16, < 6.16.2CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (Azure FIPS) vulnerabilities
Mar 4, 2026Linux kernel (Azure) vulnerabilities
Mar 4, 2026Linux kernel (Xilinx) vulnerabilities
Feb 24, 2026Linux kernel (IBM) vulnerabilities
Feb 24, 2026kernel: rcu: Fix rcu_read_unlock() deadloop due to IRQ work
Sep 11, 2025rcu: Fix rcu_read_unlock() deadloop due to IRQ work
Sep 9, 2025