VDB
DEBIAN-CVE-2025-37880
DEBIAN-CVE-2025-37880
PUBLISHED
CVSS 5.5 MEDIUM
In the Linux kernel, the following vulnerability has been resolved: um: work around sched_yield not yielding in time-travel mode sched_yield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace spinlock in ASAN. Unfortunately, with time-travel it causes an extreme slowdown or even deadlock depending on the kernel configuration (CONFIG_UML_MAX_USERSPACE_ITERATIONS). Work around it by accounting time to the process whenever it executes a sched_yield syscall.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | linux | 6.12.73-1, 6.12.73-1~bpo12+1, 6.12.74-1 |
| Debian:13 | linux | 6.19.4-1~exp1, 6.19.5-1~exp1, 6.19.6-1 |
| Debian:12 | linux | 6.1.98-1, 6.1.99-1, 6.10-1 |
| Debian:11 | linux | 6.12.17-1, 0, 5.10.103-1~bpo10+1 |
Timeline
- May 9, 2025 CVE Published
- Apr 28, 2026 CVE Updated