CVE-2025-40140

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.30% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 21.8% of scored records. A rank, not a probability.

NVD base score

8.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-07-30.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2025-11-12 10:23Z9 MO AGO

Last updated

2026-08-05 12:08Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CNA CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-366Race Condition within a ThreadBase

Data version

5.2

Document digest

c1b2aef686393c4a28b192b0b38b125d87b67f258c254dec05d20d705aceb715

• git.kernel.orghttps://git.kernel.org/stable/c/cce3c0e21cdd15bcba5c35d3af1700186de8f187
• git.kernel.orghttps://git.kernel.org/stable/c/1a08a37ac03d07a1608a1592791041cac979fbc3
• git.kernel.orghttps://git.kernel.org/stable/c/54f8ef1a970a8376e5846ed90854decf7c00555d
• git.kernel.orghttps://git.kernel.org/stable/c/114e05344763a102a8844efd96ec06ba99293ccd
• git.kernel.orghttps://git.kernel.org/stable/c/6394bade9daab8e318c165fe43bba012bf13cd8e
• git.kernel.orghttps://git.kernel.org/stable/c/6053e47bbf212b93c051beb4261d7d5a409d0ce3
• git.kernel.orghttps://git.kernel.org/stable/c/9d72df7f5eac946f853bf49c428c4e87a17d91da
• git.kernel.orghttps://git.kernel.org/stable/c/958baf5eaee394e5fd976979b0791a875f14a179