Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-40341

10
FAUCET Score

CVE-2025-40341 is a Linux kernel vulnerability affecting the robust_list pointer handling during concurrent exec() operations. It allows a race condition where sys_get_robust_list() can erroneously access a target process's robust_list pointer after it transitions to a privileged state via exec(), bypassing intended access restrictions. This could lead to unauthorized disclosure of sensitive memory addresses across privilege boundaries. While no CVSS score is available, its FAUCET Risk Score is 7/100, indicating a low to moderate risk. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
LinuxLinux
2.6.17CNA affecteddefault affected
LinuxLinux
>= 0771dfefc9e538f077d0b43b6dec19a5a67d0e70, < 3b4222494489f6d4b8705a496dab03384b7ca998, >= 0771dfefc9e538f077d0b43b6dec19a5a67d0e70, < 4aced32596ead1820b7dbd8e40d30b30dc1f3ad4, >= 0771dfefc9e538f077d0b43b6dec19a5a67d0e70, < 6511984d1aa1360181bcafb1ca75df7f291ef237, >= 0771dfefc9e538f077d0b43b6dec19a5a67d0e70, < 6b54082c3ed4dc9821cdf0edb17302355cc5bb45, >= 0771dfefc9e538f077d0b43b6dec19a5a67d0e70, < b524455a51feb6013df3a5dba3160487b2e8e22aCNA affecteddefault unaffected

CVSS Data

CVSS data has not been published for this CVE.

Exploit Intelligence

EPSS Score
0.20%
Probability of exploitation in next 30 days
EPSS Percentile
10.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15

Social Chatter

No social media mentions found for this CVE.

Media Mentions

Remediation

Patch Available

Vendor Patches (34)

microsoftpatch availablevia msrc
Product: 20613-17084Fixed in: 6.6.117.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.112.1-2 on Azure Linux 3.0Fixed in: 6.6.117.1-1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (noble)Fixed in: 6.8.0-1052.55
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (noble)Fixed in: 6.8.0-1050.54
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi-realtime (noble)Fixed in: 6.8.0-2040.41
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (noble)Fixed in: 6.8.0-1052.58+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (noble)Fixed in: 6.8.0-1050.53+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (noble)Fixed in: 6.8.0-106.106+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1052.55+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1049.52~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (noble)Fixed in: 6.8.0-1049.52
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1049.52.1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.8 (jammy)Fixed in: 6.8.0-1052.55~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-6.8 (jammy)Fixed in: 6.8.0-106.106~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-6.8 (jammy)Fixed in: 6.8.0-1049.49~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-106.106.1~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-6.8 (jammy)Fixed in: 6.8.0-1047.48~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (noble)Fixed in: 6.8.0-106.106
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (noble)Fixed in: 6.8.0-1050.53
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (questing)Fixed in: 6.17.0-1008.8
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (noble)Fixed in: 6.8.0-1048.53
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (noble)Fixed in: 6.8.0-1035.38
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (noble)Fixed in: 6.8.0-1049.49
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (noble)Fixed in: 6.8.0-106.106.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (noble)Fixed in: 6.8.0-1047.48
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1045.46~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (noble)Fixed in: 6.8.1-1045.46
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-6.8 (jammy)Fixed in: 6.8.0-1050.53~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-6.8 (jammy)Fixed in: 6.8.0-1051.57~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (noble)Fixed in: 6.8.0-1051.57
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx (noble)Fixed in: 6.8.0-1029.30
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: kernel

Vendor Advisories (13)

ubuntuUSN-8261-1

Linux kernel (Xilinx) vulnerabilities

May 7, 2026
ubuntuUSN-8165-1

Linux kernel (Azure FIPS) vulnerabilities

Apr 9, 2026
ubuntuUSN-8095-5

Linux kernel (Raspberry Pi) vulnerabilities

Apr 1, 2026
ubuntuUSN-8126-1

Linux kernel (Azure) vulnerabilities

Mar 25, 2026
ubuntuUSN-8125-1

Linux kernel (Azure) vulnerabilities

Mar 25, 2026
ubuntuUSN-8095-4

Linux kernel (AWS) vulnerabilities

Mar 23, 2026
ubuntuUSN-8095-3

Linux kernel (Real-time) vulnerabilities

Mar 17, 2026
ubuntuUSN-8095-2

Linux kernel (FIPS) vulnerabilities

Mar 16, 2026
ubuntuUSN-8100-1

Linux kernel (NVIDIA) vulnerabilities

Mar 16, 2026
ubuntuUSN-8095-1

Linux kernel vulnerabilities

Mar 16, 2026
ubuntuUSN-8029-3

Linux kernel (Azure) vulnerabilities

Feb 24, 2026
microsoft2025-Dec/CVE-2025-40341Moderate

futex: Don't leak robust_list pointer on exec race

Dec 9, 2025
redhatCVE-2025-40341Low

kernel: futex: Don't leak robust_list pointer on exec race

Dec 9, 2025

References

git.kernel.org / stable/c/3b4222494489f6d4b8705a496dab03384b7ca998
git.kernel.org / stable/c/4aced32596ead1820b7dbd8e40d30b30dc1f3ad4
git.kernel.org / stable/c/6511984d1aa1360181bcafb1ca75df7f291ef237
git.kernel.org / stable/c/6b54082c3ed4dc9821cdf0edb17302355cc5bb45
git.kernel.org / stable/c/b524455a51feb6013df3a5dba3160487b2e8e22a