Home

Description

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix SMP ordering in switch_mm_irqs_off() Stephen noted that it is possible to not have an smp_mb() between the loaded_mm store and the tlb_gen load in switch_mm(), meaning the ordering against flush_tlb_mm_range() goes out the window, and it becomes possible for switch_mm() to not observe a recent tlb_gen update and fail to flush the TLBs. [ dhansen: merge conflict fixed by Ingo ]

PUBLISHED Reserved 2025-04-16 | Published 2025-11-12 | Updated 2025-11-12 | Assigner Linux

Product status

Default status
unaffected

209954cbc7d0ce1a190fc725d20ce303d74d2680 (git) before 0fe5e3f5fb75c5d88dad24dece3ee75e9d87adeb
affected

209954cbc7d0ce1a190fc725d20ce303d74d2680 (git) before 83b0177a6c4889b3a6e865da5e21b2c9d97d0551
affected

Default status
affected

6.14
affected

Any version before 6.14
unaffected

6.17.5 (semver)
unaffected

6.18-rc2 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/0fe5e3f5fb75c5d88dad24dece3ee75e9d87adeb

git.kernel.org/...c/83b0177a6c4889b3a6e865da5e21b2c9d97d0551

cve.org (CVE-2025-40174)

nvd.nist.gov (CVE-2025-40174)

Download JSON