Search: CVE-2025-39977

A use-after-free vulnerability in the Linux kernel's futex subsystem related to requeue-PI operations has been fixed in a SUSE Linux Enterprise 16 live patch. The flaw involves a race condition where futex_wait_requeue_pi() can exit without proper synchronization, causing use of freed memory. The patch ensures proper reading of futex_q::task before updating the requeue state to maintain valid references during wake-up calls.