CVE-2025-40305

In the Linux kernel, the following vulnerability has been resolved: 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN p9_read_work() doesn't set Rworksched and doesn't do schedule_work(m->rq) if list_empty(&m->req_list). However, if the pipe is full, we need to read more data and this used to work prior to commit aaec5a95d59615 ("pipe_read: don't wake up the writer if the pipe is still full"). p9_read_work() does p9_fd_read() -> ... -> anon_pipe_read() which (before the commit above) triggered the unnecessary wakeup. This wakeup calls p9_pollwake() which kicks p9_poll_workfn() -> p9_poll_mux(), p9_poll_mux() will notice EPOLLIN and schedule_work(&m->rq). This no longer happens after the optimization above, change p9_fd_request() to use p9_poll_mux() instead of only checking for EPOLLOUT.

• https://git.kernel.org/stable/c/242531004d7de8c159f9bfadebe33fe8060b1046
• https://git.kernel.org/stable/c/e8fe3f07a357c39d429e02ca34f740692d88967a

Published

Dec 8, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4030A vulnerability was found in PHPGurukul COVID19 Testing Mana…9.8
• CVE-2025-40300In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-40301In the Linux kernel, the following vulnerability has been re…7.6
• CVE-2025-40302In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-40303In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-40304In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-40306In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-40307In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-40308In the Linux kernel, the following vulnerability has been re…
• CVE-2025-40309In the Linux kernel, the following vulnerability has been re…8
• CVE-2025-4031A vulnerability was found in PHPGurukul Pre-School Enrollmen…9.8
• CVE-2025-40310In the Linux kernel, the following vulnerability has been re…