CVE-2025-40201 addresses a race condition in the Linux kernel's sys_prlimit64() syscall implementation. The vulnerability stems from the improper locking of task_lock(tsk->group_leader) in the do_prlimit() path. The function sys_prlimit64() obtains a reference to a task_struct but does not adequately protect against the task exiting or executing, which can lead to use-after-free of the task_struct when locking the group leader. Additionally, concurrent modifications to the group_leader pointer (e.g., via mt-exec) can cause the wrong lock to be acquired or inconsistencies between lock and unlock operations. The fix involves taking the tasklist_lock when necessary to prevent these race conditions, ensuring proper synchronization.

Exploitation of this race condition can lead to use-after-free scenarios and incorrect locking in kernel space, potentially resulting in privilege escalation, data corruption, or denial of service (kernel crash). The CVSS v3.1 vector indicates local attack complexity with low privileges required and no user interaction, with high impact on confidentiality, integrity, and availability.

A fix has been implemented in the Linux kernel by modifying sys_prlimit64() to take the tasklist_lock when necessary to prevent race conditions. Users and administrators should apply the official kernel updates that include this fix. Since this is a kernel-level vulnerability, updating to the patched kernel version is the recommended mitigation. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel stable release notes for the exact fixed versions and apply updates accordingly.