CVE-2025-40341 is a Linux kernel vulnerability affecting the robust_list pointer handling during concurrent exec() operations. It allows a race condition where sys_get_robust_list() can erroneously access a target process's robust_list pointer after it transitions to a privileged state via exec(), bypassing intended access restrictions. This could lead to unauthorized disclosure of sensitive memory addresses across privilege boundaries. While no CVSS score is available, its FAUCET Risk Score is 7/100, indicating a low to moderate risk. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 2.6.17CNA affecteddefault affected | |
| Linux | Linux | >= 0771dfefc9e538f077d0b43b6dec19a5a67d0e70, < 3b4222494489f6d4b8705a496dab03384b7ca998, >= 0771dfefc9e538f077d0b43b6dec19a5a67d0e70, < 4aced32596ead1820b7dbd8e40d30b30dc1f3ad4, >= 0771dfefc9e538f077d0b43b6dec19a5a67d0e70, < 6511984d1aa1360181bcafb1ca75df7f291ef237, >= 0771dfefc9e538f077d0b43b6dec19a5a67d0e70, < 6b54082c3ed4dc9821cdf0edb17302355cc5bb45, >= 0771dfefc9e538f077d0b43b6dec19a5a67d0e70, < b524455a51feb6013df3a5dba3160487b2e8e22aCNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
No social media mentions found for this CVE.
Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure FIPS) vulnerabilities
Apr 9, 2026Linux kernel (Raspberry Pi) vulnerabilities
Apr 1, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (AWS) vulnerabilities
Mar 23, 2026Linux kernel (Real-time) vulnerabilities
Mar 17, 2026Linux kernel (FIPS) vulnerabilities
Mar 16, 2026Linux kernel (NVIDIA) vulnerabilities
Mar 16, 2026Linux kernel vulnerabilities
Mar 16, 2026Linux kernel (Azure) vulnerabilities
Feb 24, 2026futex: Don't leak robust_list pointer on exec race
Dec 9, 2025kernel: futex: Don't leak robust_list pointer on exec race
Dec 9, 2025