CVE-2025-39744: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-39744 is a vulnerability discovered in the Linux kernel related to a deadlock condition in the RCU (Read-Copy-Update) subsystem. The vulnerability was disclosed on September 11, 2025, and affects the kernel's interrupt handling mechanism (NVD, Red Hat).

The vulnerability occurs during rcureadunlockspecial() when executed during irqexit(). A deadlock can occur if an IPI (Inter-Processor Interrupt) is issued, as the IPI triggers the irqexit() path recursively. The issue was specifically identified when invoking a BPF program on the tracetick_stop() tracepoint. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) (Red Hat).

The primary impact of this vulnerability is a potential system lockup due to the recursive deadlock condition. When triggered, it can cause the system to become unresponsive, affecting system availability. The vulnerability specifically impacts the kernel's interrupt handling and RCU subsystem functionality (Red Hat).

The vulnerability has been resolved by correcting the management of the irq_work state. The fix involves proper handling of the interrupt work queue state during RCU operations (NVD).