CVE-2025-40174
High
Description
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix SMP ordering in switch_mm_irqs_off() Stephen noted that it is possible to not have an smp_mb() between the loaded_mm store and the tlb_gen load in switch_mm(), meaning the ordering against flush_tlb_mm_range() goes out the window, and it becomes possible for switch_mm() to not observe a recent tlb_gen update and fail to flush the TLBs. [ dhansen: merge conflict fixed by Ingo ]
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linux0fe5e3f5fb75c5d88dad24dece3ee75e9d87adeb, 83b0177a6c4889b3a6e865da5e21b2c9d97d0551 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 209954cbc7d0ce1a190fc725d20ce303d74d2680 ≤ v < 0fe5e3f5fb75c5d88dad24dece3ee75e9d87adeb, 209954cbc7d0ce1a190fc725d20ce303d74d2680 ≤ v < 83b0177a6c4889b3a6e865da5e21b2c9d97d0551, 6.14 | 0fe5e3f5fb75c5d88dad24dece3ee75e9d87adeb, 83b0177a6c4889b3a6e865da5e21b2c9d97d0551 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.