Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2025-40220: Linux kernels may hang when using FUSE block storage
CVE-2025-40220 · published 11 months ago
Summary
The Linux kernel’s FUSE block driver can get stuck if a program closes a file while asynchronous writes are still pending. This can cause both the application and the FUSE server to stop responding. Updating to the latest kernel version that includes the fix resolves the hang.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1100.107~20.04.2.
- Update canonical linux-azure-5.15 to version 5.15.0-1110.119~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1100.109~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-170.180~20.04.3.
- Update canonical linux-ibm-5.15 to version 5.15.0-1094.97~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1095.101~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-170.180~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1052.52~20.04.2.
- Update canonical linux-oracle-5.15 to version 5.15.0-1097.103~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1095.99~20.04.1.
- Update canonical linux to version 5.15.0-170.180.
- Update canonical linux-aws to version 5.15.0-1100.107.
- Update canonical linux-aws-6.8 to version 6.8.0-1050.53~22.04.1.
- Update canonical linux-azure to version 5.15.0-1109.118.
- Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1100.109.
- Update canonical linux-gcp-6.8 to version 6.8.0-1052.55~22.04.1.
- Update canonical linux-gke to version 5.15.0-1096.102.
- Update canonical linux-gkeop to version 5.15.0-1083.91.
- Update canonical linux-hwe-6.8 to version 6.8.0-106.106~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1094.97.
- Update canonical linux-ibm-6.8 to version 6.8.0-1049.49~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1095.101.
- Update canonical linux-kvm to version 5.15.0-1092.97.
- Update canonical linux-lowlatency to version 5.15.0-170.180.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-106.106.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1095.96.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1049.52~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1052.52.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1041.41.
- Update canonical linux-oracle to version 5.15.0-1097.103.
- Update canonical linux-oracle-6.8 to version 6.8.0-1047.48~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1097.100.
- Update canonical linux-riscv-6.8 to version 6.8.0-106.106~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1064.68.
- Update canonical linux-bluefield to version 5.15.0-1084.86.
- Update canonical linux-aws-fips to version 5.15.0-1100.107+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1109.118+fips1.
- Update canonical linux-fips to version 5.15.0-170.180+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1100.109+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1092.94.
- Update canonical linux-realtime to version 5.15.0-1099.108.
- Update canonical linux-realtime-6.8 to version 6.8.1-1045.46~22.04.1.
- Update canonical linux to version 6.8.0-106.106.
- Update canonical linux-aws to version 6.8.0-1050.53.
- Update canonical linux-aws-6.17 to version 6.17.0-1007.7~24.04.1.
- Update canonical linux-azure to version 6.8.0-1051.57.
- Update canonical linux-gcp to version 6.8.0-1052.55.
- Update canonical linux-gcp-6.17 to version 6.17.0-1008.8~24.04.1.
- Update canonical linux-gke to version 6.8.0-1048.53.
- Update canonical linux-gkeop to version 6.8.0-1035.38.
- Update canonical linux-ibm to version 6.8.0-1049.49.
- Update canonical linux-lowlatency to version 6.8.0-106.106.1.
- Update canonical linux-nvidia to version 6.8.0-1049.52.
- Update canonical linux-nvidia-6.17 to version 6.17.0-1008.8.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1049.52.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
- Update canonical linux-oem-6.17 to version 6.17.0-1011.11.
- Update canonical linux-oracle to version 6.8.0-1047.48.
- Update canonical linux-oracle-6.17 to version 6.17.0-1007.7~24.04.1.
- Update canonical linux-raspi to version 6.8.0-1050.54.
- Update canonical linux-xilinx to version 6.8.0-1028.29.
- Update canonical linux-aws-fips to version 6.8.0-1050.53+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1052.58+fips1.
- Update canonical linux-fips to version 6.8.0-106.106+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1052.55+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2040.41.
- Update canonical linux-realtime to version 6.8.1-1045.46.
- Update canonical linux-realtime-6.17 to version 6.17.0-1006.7~24.04.1.
- Update canonical linux to version 6.17.0-14.14.
- Update canonical linux-aws to version 6.17.0-1007.7.
- Update canonical linux-azure to version 6.17.0-1008.8.
- Update canonical linux-gcp to version 6.17.0-1007.7.
- Update canonical linux-oracle to version 6.17.0-1007.7.
- Update canonical linux-raspi to version 6.17.0-1008.8.
- Update canonical linux-realtime to version 6.17.0-1006.7.
- Update canonical linux-riscv to version 6.17.0-14.14.1.
- Update canonical rootio-linux to version 6.8.0-134.134.root.io.80.
- Update debian rootio-linux to version 5.10.247-1.root.io.42.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.82.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
- Update canonical linux-bluefield to version 6.8.0-1017.21.
- Update linux kernel to version 6.17.4.
- Update canonical linux-azure-fde to version 5.15.0-1109.118.1.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1058.65~22.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1058.65.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update debian linux to version 6.1.158-1.
- Update debian linux to version 6.12.57-1.
- Update debian linux to version 6.17.6-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1100.107~20.04.2 Fix: upgrade to 5.15.0-1100.107~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1110.119~20.04.1 Fix: upgrade to 5.15.0-1110.119~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1100.109~20.04.1 Fix: upgrade to 5.15.0-1100.109~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
Showing 50 of 208. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-170.180~20.04.3 Fix: upgrade to 5.15.0-170.180~20.04.3
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1094.97~20.04.1 Fix: upgrade to 5.15.0-1094.97~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1095.101~20.04.1 Fix: upgrade to 5.15.0-1095.101~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-170.180~20.04.1 Fix: upgrade to 5.15.0-170.180~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1052.52~20.04.2 Fix: upgrade to 5.15.0-1052.52~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1097.103~20.04.1 Fix: upgrade to 5.15.0-1097.103~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1095.99~20.04.1 Fix: upgrade to 5.15.0-1095.99~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-170.180 Fix: upgrade to 5.15.0-170.180
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1100.107 Fix: upgrade to 5.15.0-1100.107
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1050.53~22.04.1 Fix: upgrade to 6.8.0-1050.53~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1109.118 Fix: upgrade to 5.15.0-1109.118
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1051.57~22.04.1 Fix: upgrade to 6.8.0-1051.57~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1058.65~22.04.1 Fix: upgrade to 6.8.0-1058.65~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1100.109 Fix: upgrade to 5.15.0-1100.109
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1052.55~22.04.1 Fix: upgrade to 6.8.0-1052.55~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1096.102 Fix: upgrade to 5.15.0-1096.102
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1083.91 Fix: upgrade to 5.15.0-1083.91
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-106.106~22.04.1 Fix: upgrade to 6.8.0-106.106~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1094.97 Fix: upgrade to 5.15.0-1094.97
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1049.49~22.04.1 Fix: upgrade to 6.8.0-1049.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1095.101 Fix: upgrade to 5.15.0-1095.101
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1092.97 Fix: upgrade to 5.15.0-1092.97
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-170.180 Fix: upgrade to 5.15.0-170.180
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-106.106.1~22.04.1 Fix: upgrade to 6.8.0-106.106.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1095.96 Fix: upgrade to 5.15.0-1095.96
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1049.52~22.04.1 Fix: upgrade to 6.8.0-1049.52~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1052.52 Fix: upgrade to 5.15.0-1052.52
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1041.41 Fix: upgrade to 5.15.0-1041.41
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1097.103 Fix: upgrade to 5.15.0-1097.103
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1047.48~22.04.1 Fix: upgrade to 6.8.0-1047.48~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1097.100 Fix: upgrade to 5.15.0-1097.100
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-106.106~22.04.1 Fix: upgrade to 6.8.0-106.106~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1064.68 Fix: upgrade to 5.15.0-1064.68
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1084.86 Fix: upgrade to 5.15.0-1084.86
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1100.107+fips1 Fix: upgrade to 5.15.0-1100.107+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1109.118+fips1 Fix: upgrade to 5.15.0-1109.118+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-170.180+fips1 Fix: upgrade to 5.15.0-170.180+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1100.109+fips1 Fix: upgrade to 5.15.0-1100.109+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1092.94 Fix: upgrade to 5.15.0-1092.94
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1099.108 Fix: upgrade to 5.15.0-1099.108
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1045.46~22.04.1 Fix: upgrade to 6.8.1-1045.46~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-106.106 Fix: upgrade to 6.8.0-106.106
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1050.53 Fix: upgrade to 6.8.0-1050.53
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 |
< 6.17.0-1007.7~24.04.1 Fix: upgrade to 6.17.0-1007.7~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1051.57 Fix: upgrade to 6.8.0-1051.57
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1052.55 Fix: upgrade to 6.8.0-1052.55
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 |
< 6.17.0-1008.8~24.04.1 Fix: upgrade to 6.17.0-1008.8~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1048.53 Fix: upgrade to 6.8.0-1048.53
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1049.49 Fix: upgrade to 6.8.0-1049.49
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-106.106.1 Fix: upgrade to 6.8.0-106.106.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1049.52 Fix: upgrade to 6.8.0-1049.52
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1049.52.1 Fix: upgrade to 6.8.0-1049.52.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1020.20 Fix: upgrade to 6.8.0-1020.20
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 |
< 6.17.0-1011.11 Fix: upgrade to 6.17.0-1011.11
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1047.48 Fix: upgrade to 6.8.0-1047.48
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 |
< 6.17.0-1007.7~24.04.1 Fix: upgrade to 6.17.0-1007.7~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1050.54 Fix: upgrade to 6.8.0-1050.54
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1028.29 Fix: upgrade to 6.8.0-1028.29
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1050.53+fips1 Fix: upgrade to 6.8.0-1050.53+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1052.58+fips1 Fix: upgrade to 6.8.0-1052.58+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-106.106+fips1 Fix: upgrade to 6.8.0-106.106+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1052.55+fips1 Fix: upgrade to 6.8.0-1052.55+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2040.41 Fix: upgrade to 6.8.0-2040.41
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1045.46 Fix: upgrade to 6.8.1-1045.46
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 |
< 6.17.0-1006.7~24.04.1 Fix: upgrade to 6.17.0-1006.7~24.04.1
|
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-14.14 Fix: upgrade to 6.17.0-14.14
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-azure |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1006.7 Fix: upgrade to 6.17.0-1006.7
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-14.14.1 Fix: upgrade to 6.17.0-14.14.1
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-134.134.root.io.80 < 6.8.0-136.136.root.io.82 < 6.8.0-136.136.root.io.83 Fix: upgrade to 6.8.0-134.134.root.io.80
|
| Root:Debian:11 | debian | rootio-linux |
< 5.10.247-1.root.io.42 Fix: upgrade to 5.10.247-1.root.io.42
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1017.21 Fix: upgrade to 6.8.0-1017.21
|
| Linux | linux | kernel |
>= 6.13.0, < 6.17.4 Fix: upgrade to 6.17.4
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1109.118.1 Fix: upgrade to 5.15.0-1109.118.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1058.65 Fix: upgrade to 6.8.0-1058.65
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Debian:12 | debian | linux |
< 6.1.158-1 Fix: upgrade to 6.1.158-1
|
| Debian:13 | debian | linux |
< 6.12.57-1 Fix: upgrade to 6.12.57-1
|
| Debian:14 | debian | linux |
< 6.17.6-1 Fix: upgrade to 6.17.6-1
|
Original advisory text
fuse: fix livelock in synchronous file put from fuseblk workers
In the Linux kernel, the following vulnerability has been resolved: fuse: fix livelock in synchronous file put from fuseblk workers I observed a hang when running generic/323 against a fuseblk server. This test opens a file, initiates a lot of AIO writes to that file descriptor, and closes the file descriptor before the writes complete. Unsurprisingly, the AIO exerciser threads are mostly stuck waiting for responses from the fuseblk server: # cat /proc/372265/task/372313/stack [<0>] request_wait_answer+0x1fe/0x2a0 [fuse] [<0>] __fuse_simple_request+0xd3/0x2b0 [fuse] [<0>] fuse_do_getattr+0xfc/0x1f0 [fuse] [<0>] fuse_file_read_iter+0xbe/0x1c0 [fuse] [<0>] aio_read+0x130/0x1e0 [<0>] io_submit_one+0x542/0x860 [<0>] __x64_sys_io_submit+0x98/0x1a0 [<0>] do_syscall_64+0x37/0xf0 [<0>] entry_SYSCALL_64_after_hwframe+0x4b/0x53 But the /weird/ part is that the fuseblk server threads are waiting for responses from itself: # cat /proc/372210/task/372232/stack [<0>] request_wait_answer+0x1fe/0x2a0 [fuse] [<0>] __fuse_simple_request+0xd3/0x2b0 [fuse] [<0>] fuse_file_put+0x9a/0xd0 [fuse] [<0>] fuse_release+0x36/0x50 [fuse] [<0>] __fput+0xec/0x2b0 [<0>] task_work_run+0x55/0x90 [<0>] syscall_exit_to_user_mode+0xe9/0x100 [<0>] do_syscall_64+0x43/0xf0 [<0>] entry_SYSCALL_64_after_hwframe+0x4b/0x53 The fuseblk server is fuse2fs so there's nothing all that exciting in the server itself. So why is the fuse server calling fuse_file_put? The commit message for the fstest sheds some light on that: "By closing the file descriptor before calling io_destroy, you pretty much guarantee that the last put on the ioctx will be done in interrupt context (during I/O completion). Aha. AIO fgets a new struct file from the fd when it queues the ioctx. The completion of the FUSE_WRITE command from userspace causes the fuse server to call the AIO completion function. The completion puts the struct file, queuing a delayed fput to the fuse server task. When the fuse server task returns to userspace, it has to run the delayed fput, which in the case of a fuseblk server, it does synchronously. Sending the FUSE_RELEASE command sychronously from fuse server threads is a bad idea because a client program can initiate enough simultaneous AIOs such that all the fuse server threads end up in delayed_fput, and now there aren't any threads left to handle the queued fuse commands. Fix this by only using asynchronous fputs when closing files, and leave a comment explaining why.
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-40220 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40220... Vendor Advisory
- https://ubuntu.com/security/CVE-2025-40220 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2025-40220 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-40220 Third Party Advisory
- https://git.kernel.org/linus/26e5c67deb2e1f42a951f022fdf5b9f7eb747b01 Third Party Advisory
- https://git.kernel.org/stable/c/26e5c67deb2e1f42a951f022fdf5b9f7eb747b01 Third Party Advisory
- https://git.kernel.org/stable/c/548e1f2bac1d4df91a6138f26bb4ab00323fd948 Third Party Advisory
- https://git.kernel.org/stable/c/83b375c6efef69b1066ad2d79601221e7892745a Third Party Advisory
- https://git.kernel.org/stable/c/b26923512dbe57ae4917bafd31396d22a9d1691a Third Party Advisory
- https://git.kernel.org/stable/c/bfd17b6138df0122a95989457d8e18ce0b86165e Third Party Advisory
- https://git.kernel.org/stable/c/cfd1aa3e2b71f3327cb373c45a897c9028c62b35 Third Party Advisory
- https://git.kernel.org/stable/c/f19a1390af448d9e193c08e28ea5f727bf3c3049 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8029-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8030-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8034-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8029-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8034-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8048-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-7 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-8 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8029-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8100-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8125-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8126-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8141-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8163-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8165-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8163-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8243-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8261-1 Vendor Advisory
Severity
6.8
Medium
Timeline
Published4 Dec 2025
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-40220 · NVD
UBUNTU-CVE-2025-40220 · OSV
CVE-2025-40220 · OSV
DEBIAN-CVE-2025-40220 · OSV
Track software like this
Free during beta