CVE-2025-39976

Linux Kernel 6.16-6.16.9 - Denial of Service via futex_hash_allocate_default Failure

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: futex: Use correct exit on failure from futex_hash_allocate_default() copy_process() uses the wrong error exit path from futex_hash_allocate_default(). After exiting from futex_hash_allocate_default(), neither tasklist_lock nor siglock has been acquired. The exit label bad_fork_core_free unlocks both of these locks which is wrong. The next exit label, bad_fork_cancel_cgroup, is the correct exit. sched_cgroup_fork() did not allocate any resources that need to freed. Use bad_fork_cancel_cgroup on error exit from futex_hash_allocate_default().

Scores

EPSS 0.0017
EPSS Percentile 6.8%

Details

Status published
Products (7)
linux/Kernel 6.16.0 - 6.16.10linux
Linux/Linux < 6.16
Linux/Linux 6.16
Linux/Linux 6.16.10 - 6.16.*
Linux/Linux 6.17
Linux/Linux 7c4f75a21f636486d2969d9b6680403ea8483539 - 4ec3c15462b9f44562f45723a92e2807746ba7d1
Linux/Linux 7c4f75a21f636486d2969d9b6680403ea8483539 - f1635765cd0fdbf27b04d9a50be91a01b5adda13
Published Oct 15, 2025
Tracked Since Feb 18, 2026