CVE-2025-39886: bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
Published Sep 23, 2025
·Updated
bpf: Tell memcg to use allowspinning=false path in bpftimerinit()
Affected Software
12 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.96.2-2
Microsoft azl3 kernel 6.6.104.2-4
Linux Linux kernel>=5.15<6.6.107
Linux Linux kernel>=6.7<6.12.48
Linux Linux kernel>=6.13<6.16.8
Linux Linux kernel=6.17-rc1
Linux Linux kernel=6.17-rc2
Linux Linux kernel=6.17-rc3
Linux Linux kernel=6.17-rc4
Linux Linux kernel=6.17-rc5
Microsoft cbl2 kernel 5.15.186.1-1
Remediation
Event History
Sep 23, 2025
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Data Sourced
via NVD·06:15 AM
RemedyDescriptionSeverityAffected Software
Sep 24, 2025
Data Sourced
via Microsoft·01:02 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·01:02 AM
SeverityAffected Software
Updated
via Microsoft·08:02 AM
DescriptionSeverity
Updated
via Microsoft·08:02 AM
Affected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-39886?
CVE-2025-39886 is classified as a medium severity vulnerability in the Linux kernel.
2
How do I fix CVE-2025-39886?
To fix CVE-2025-39886, update your Linux kernel to the latest version where this vulnerability has been addressed.
3
What types of systems are affected by CVE-2025-39886?
CVE-2025-39886 affects the Linux kernel across various distributions that rely on affected versions.
4
What is the impact of CVE-2025-39886?
The impact of CVE-2025-39886 includes potential locking issues during the initialization of BPF timers.
5
Is CVE-2025-39886 actively being exploited?
As of the last reports, there are no known active exploits specifically targeting CVE-2025-39886.