CVE-2025-40358

riscv: stacktrace: Disable KASAN checks for non-current tasks

HIGH
7.1
CVSS Score
Published: December 16, 2025 at 01:39 PM UTC
Updated: October 14, 2026 at 01:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.1
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other than current, KASAN would report "BUG: KASAN: out-of-bounds in walk_stackframe+0x41c/0x460" There is a same issue on x86 and has been resolved by the commit 84936118bdf3 ("x86/unwind: Disable KASAN checks for non-current tasks") The solution could be applied to RISC-V too. This patch also can solve the issue: https://seclists.org/oss-sec/2025/q4/23 [[email protected]: clean up checkpatch issues]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.155d8544e2d0075a5f3c9a2cf27152354d54360da1
Vendor states this is fixed in 060ea84a484e852b52b938f234bf9b5503a6c910 (fixed)
Vendor states this is fixed in 27379fcc15a10d3e3780fe79ba3fc7ed1ccd78e2 (fixed)
Vendor states this is fixed in 2c8d2b53866fb229b438296526ef0fa5a990e5e5 (fixed)
Vendor states this is fixed in ef4d626ac59a56f8ec5cc09c1fef26f2923eec6f (fixed)
Vendor states this is fixed in f34ba22989da61186f30a40b6a82e0b3337b96fc (fixed)
Vendor states this is fixed in 4.15 (unaffected)
Vendor states this is fixed in 6.1.167 (unaffected)
Vendor states this is fixed in 6.12.58 (unaffected)
Vendor states this is fixed in 6.17.8 (unaffected)
Vendor states this is fixed in 6.18 (unaffected)
Vendor states this is fixed in 6.6.117 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

CVSS

7.1HIGHLinux
Vector?

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card