In the Linux kernel, the following vulnerability has been resolved: fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock The parent function ext4_xattr_inode_lookup_create already uses GFP_NOFS for memory alloction, so the function ext4_xattr_inode_cache_find should use same gfp_flag.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/009127b0fc013aed193961686c28c2b541a5b2f3 cve-icon cve-icon
https://git.kernel.org/stable/c/1534f72dc2a11ded38b0e0268fbcc0ca24e9fd4a cve-icon cve-icon
https://git.kernel.org/stable/c/199ab7b43c5ef7d384f6a08e786e107b3509acda cve-icon cve-icon
https://git.kernel.org/stable/c/238f7a7356c33a9797a6297c6fdfd87f113b2325 cve-icon cve-icon
https://git.kernel.org/stable/c/5e6b27f4e68682aa3db9f83ca04adef89903159b cve-icon cve-icon
https://git.kernel.org/stable/c/add8458cac0b33a5e7a6b98457b38baea9600859 cve-icon cve-icon
https://git.kernel.org/stable/c/bb7d0d13c6e1f061464d1c425b08348a4e0c235d cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025121644-CVE-2025-40361-50ca@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-40361 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-40361 cve-icon
History

Wed, 17 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Tue, 16 Dec 2025 14:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock The parent function ext4_xattr_inode_lookup_create already uses GFP_NOFS for memory alloction, so the function ext4_xattr_inode_cache_find should use same gfp_flag.
Title fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-16T13:40:00.758Z

Reserved: 2025-04-16T07:20:57.187Z

Link: CVE-2025-40361

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-12-16T14:15:48.093

Modified: 2025-12-16T14:15:48.093

Link: CVE-2025-40361

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-12-16T00:00:00Z

Links: CVE-2025-40361 - Bugzilla

cve-icon OpenCVE Enrichment

No data.