{"id":"CVE-2025-39745","title":"rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nrcutorture: Fix rcutorture_one_extend_check() splat in RT kernels\n\nFor built with CONFIG_PREEMPT_RT=y kernels, running rcutorture\ntests resulted in the following splat:…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ec9d6356bfda69abe5f4767dd56c964127913233 < a85550267247cdf5e7499be00ea8e388ab014e50","Linux >= ec9d6356bfda69abe5f4767dd56c964127913233 < 69c5ae0f441c2d72e8f48dc1e08464c172360c4c","Linux >= ec9d6356bfda69abe5f4767dd56c964127913233 < 8d71351d88e478d3c4e945e3218e97ec677fd807","Linux 6.14"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:10:35.366400Z"},"published":"2025-09-11","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:12:56.174Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39745","references":[{"url":"https://git.kernel.org/stable/c/a85550267247cdf5e7499be00ea8e388ab014e50"},{"url":"https://git.kernel.org/stable/c/69c5ae0f441c2d72e8f48dc1e08464c172360c4c"},{"url":"https://git.kernel.org/stable/c/8d71351d88e478d3c4e945e3218e97ec677fd807"}],"tags":["cve.org"],"epss":0.00157,"epssPercentile":0.04905,"ingestedAt":"2026-11-05T22:38:32.023Z","slug":"CVE-2025-39745","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nrcutorture: Fix rcutorture_one_extend_check() splat in RT kernels\n\nFor built with CONFIG_PREEMPT_RT=y kernels, running rcutorture\ntests resulted in the following splat:\n\n[   68.797425] rcutorture_one_extend_check during change: Current 0x1  To add 0x1  To remove 0x0  preempt_count() 0x0\n[   68.797533] WARNING: CPU: 2 PID: 512 at kernel/rcu/rcutorture.c:1993 rcutorture_one_extend_check+0x419/0x560 [rcutorture]\n[   68.797601] Call Trace:\n[   68.797602]  <TASK>\n[   68.797619]  ? lockdep_softirqs_off+0xa5/0x160\n[   68.797631]  rcutorture_one_extend+0x18e/0xcc0 [rcutorture 2466dbd2ff34dbaa36049cb323a80c3306ac997c]\n[   68.797646]  ? local_clock+0x19/0x40\n[   68.797659]  rcu_torture_one_read+0xf0/0x280 [rcutorture 2466dbd2ff34dbaa36049cb323a80c3306ac997c]\n[   68.797678]  ? __pfx_rcu_torture_one_read+0x10/0x10 [rcutorture 2466dbd2ff34dbaa36049cb323a80c3306ac997c]\n[   68.797804]  ? __pfx_rcu_torture_timer+0x10/0x10 [rcutorture 2466dbd2ff34dbaa36049cb323a80c3306ac997c]\n[   68.797815] rcu-torture: rcu_torture_reader task started\n[   68.797824] rcu-torture: Creating rcu_torture_reader task\n[   68.797824]  rcu_torture_reader+0x238/0x580 [rcutorture 2466dbd2ff34dbaa36049cb323a80c3306ac997c]\n[   68.797836]  ? kvm_sched_clock_read+0x15/0x30\n\nDisable BH does not change the SOFTIRQ corresponding bits in\npreempt_count() for RT kernels, this commit therefore use\nsoftirq_count() to check the if BH is disabled.\n\n## Affected\n\n- `Linux >= ec9d6356bfda69abe5f4767dd56c964127913233 < a85550267247cdf5e7499be00ea8e388ab014e50`\n- `Linux >= ec9d6356bfda69abe5f4767dd56c964127913233 < 69c5ae0f441c2d72e8f48dc1e08464c172360c4c`\n- `Linux >= ec9d6356bfda69abe5f4767dd56c964127913233 < 8d71351d88e478d3c4e945e3218e97ec677fd807`\n- `Linux 6.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}