CVE-2025-40329: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-40329 is a deadlock vulnerability in the Linux kernel's DRM (Direct Rendering Manager) scheduler, specifically in the drm_sched_entity_kill_jobs_cb function. The flaw arises from interrupt-unsafe locking when managing job dependencies and fence signaling, which can cause a system freeze or kernel panic. It was published on December 9, 2025, and affects the Linux kernel, with Microsoft's Azure Linux 3 kernel (azl3_kernel_6.6.112.1-2) confirmed as a vulnerable product. The vulnerability carries a CVSS v3.1 base score of 7.0 (High) (MSRC).

The root cause is a race condition (CWE-667: Improper Locking) between CPU interrupt handling and lock acquisition in the DRM scheduler. When drm_sched_entity_kill_jobs_cb executes as a fence signaling callback in an interrupt context (CPU1), it attempts to acquire xa_lock, which may already be held by CPU0 executing non-interrupt-safe xa_* functions such as drm_sched_job_add_dependency(). Simultaneously, dma_fence_signal() holds fence->lock and calls back into drm_sched_entity_kill_jobs_cb, which then tries to acquire xa_lock — creating a classic ABBA deadlock. The fix involves replacing xa_* calls with their interrupt-safe xa_*_irq counterparts and restructuring fence callback logic to avoid holding conflicting locks in interrupt context (MSRC).

Successful exploitation can cause system instability, kernel panic, or a complete system freeze, resulting in high availability impact. Because the deadlock occurs in a core kernel subsystem (DRM scheduler), it can affect the integrity and confidentiality of kernel memory operations as well. An attacker with local, low-privileged access could trigger the condition by manipulating GPU job dependencies or fence signaling, potentially disrupting all processes on the affected system (MSRC).

Apply the latest Linux kernel updates that include the patch for drm_sched_entity_kill_jobs_cb, which replaces interrupt-unsafe xa_* calls with xa_*_irq variants and restructures fence callback logic. For Microsoft Azure Linux 3, update to kernel version beyond azl3_kernel_6.6.112.1-2 as indicated by the MSRC advisory. Patches are also available via the Linux stable kernel tree (commits 0d63031, 3e8ada4, 487df8b, 70150b9). As a temporary measure, restrict local user access to GPU/DRM resources to reduce exposure (MSRC).