CVE-2025-40348

A race condition was found in the Linux kernel's slab allocator. When two threads concurrently call allocslabobjexts and one fails allocation, it may overwrite the other's valid objexts pointer with OBJEXTSALLOCFAIL. The winning thread later dereferences this as a valid pointer, causing a null...