CVE-2025-40358
Description
In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other than current, KASAN would report "BUG: KASAN: out-of-bounds in walk_stackframe+0x41c/0x460" There is a same issue on x86 and has been resolved by the commit 84936118bdf3 ("x86/unwind: Disable KASAN checks for non-current tasks") The solution could be applied to RISC-V too. This patch also can solve the issue: https://seclists.org/oss-sec/2025/q4/23 [[email protected]: clean up checkpatch issues]
How to fix
- Linux Linuxef4d626ac59a56f8ec5cc09c1fef26f2923eec6f, f34ba22989da61186f30a40b6a82e0b3337b96fc, 27379fcc15a10d3e3780fe79ba3fc7ed1ccd78e2, 2c8d2b53866fb229b438296526ef0fa5a990e5e5, 060ea84a484e852b52b938f234bf9b5503a6c910 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5d8544e2d0075a5f3c9a2cf27152354d54360da1 ≤ v < ef4d626ac59a56f8ec5cc09c1fef26f2923eec6f, 5d8544e2d0075a5f3c9a2cf27152354d54360da1 ≤ v < f34ba22989da61186f30a40b6a82e0b3337b96fc, 5d8544e2d0075a5f3c9a2cf27152354d54360da1 ≤ v < 27379fcc15a10d3e3780fe79ba3fc7ed1ccd78e2, 5d8544e2d0075a5f3c9a2cf27152354d54360da1 ≤ v < 2c8d2b53866fb229b438296526ef0fa5a990e5e5, 5d8544e2d0075a5f3c9a2cf27152354d54360da1 ≤ v < 060ea84a484e852b52b938f234bf9b5503a6c910, 4.15 | ef4d626ac59a56f8ec5cc09c1fef26f2923eec6f, f34ba22989da61186f30a40b6a82e0b3337b96fc, 27379fcc15a10d3e3780fe79ba3fc7ed1ccd78e2, 2c8d2b53866fb229b438296526ef0fa5a990e5e5, 060ea84a484e852b52b938f234bf9b5503a6c910 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.