Threats Tagged 'cve-2025-40242'

A high-severity vulnerability (CVE-2025-40214) in the Linux kernel's Unix domain sockets subsystem was resolved by initializing scc_index in unix_add_edge(). This flaw could lead to privilege escalation on Container-Optimized OS nodes, affecting multiple Google Kubernetes Engine (GKE) cluster types except those using GKE Sandbox. Patch versions have been released for various Container-Optimized OS node pools and Ubuntu Linux kernel packages. Bare metal GDC software is not affected. Users are advised to update to the specified patched kernel versions and reboot to apply fixes.

A high-severity race condition vulnerability in the Linux kernel's gfs2 filesystem was resolved. The issue occurs in the gdlm_put_lock() function where a small timing window allows the DFL_UNMOUNT flag to be set while the lockspace has not yet been released. During this window, calls to gdlm_ast() and gdlm_bast() may dereference freed glock objects, leading to potential kernel memory corruption. The fix ensures that glock objects are only freed after the lockspace has been fully released.

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix unlikely race in gdlm_put_lock In gdlm_put_lock(), there is a small window of time in which the DFL_UNMOUNT flag has been set but the lockspace hasn't been released, yet. In that window, dlm may still call gdlm_ast() and gdlm_bast(). To prevent it from dereferencing freed glock objects, only free the glock if the lockspace has actually been released.