CVE-2025-40329

CVE-2025-40329 is a deadlock vulnerability in the Linux kernel's drm/sched component, specifically within the drm_sched_entity_kill_jobs_cb function. This flaw can occur when multiple CPUs attempt to acquire locks in a conflicting order, particularly involving xa_lock and fence locks during interrupt contexts. While no specific affected products are listed, it impacts systems running the vulnerable Linux kernel versions. The vulnerability has no assigned CVSS score, but its nature suggests a high attack complexity due to the specific timing and race conditions required for exploitation. The potential impact is system instability or denial of service due to the deadlock, rather than data compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE. The vulnerability has been resolved by moving the dependency iteration and re-arming logic to a separate work function to prevent the described deadlock scenarios.