CVE-2025-40024

CVE-2025-40024 relates to the Linux kernel vhost subsystem. The issue arises in vhost_task_create(), where a task is created and a reference to its task_struct is held; if the task exits early via a signal, its task_struct can be released, causing vhost_task_wake() to access a freed object. The f...