CVE-2025-40047
High
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry in io_waitid_wait() For a successful return, always remove our entry from the wait queue entry list. Previously this was skipped if a cancelation was in progress, but this can race with another invocation of the wait queue entry callback.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedOct 28, 2025
First seenOct 28, 2025
How to fix
Update
- Linux Linux696ba6032081e617564a8113a001b8d7943cb928, 3e2205db2f0608898d535da1964e1b376aacfdaa, 2f8229d53d984c6a05b71ac9e9583d4354e3b91f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f31ecf671ddc498f20219453395794ff2383e06b ≤ v < 696ba6032081e617564a8113a001b8d7943cb928, f31ecf671ddc498f20219453395794ff2383e06b ≤ v < 3e2205db2f0608898d535da1964e1b376aacfdaa, f31ecf671ddc498f20219453395794ff2383e06b ≤ v < 2f8229d53d984c6a05b71ac9e9583d4354e3b91f, 6.7 | 696ba6032081e617564a8113a001b8d7943cb928, 3e2205db2f0608898d535da1964e1b376aacfdaa, 2f8229d53d984c6a05b71ac9e9583d4354e3b91f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.