PT-2025-44095 · Linux · Linux Kernel

Publicado 2025-09-15 · Atualizado 2026-03-13 · CVE-2025-40028

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc6-dirty

Description The Linux kernel contains a flaw in the binder subsystem related to bitmap handling. A process attempting to expand its proc->dmap may experience a double-free error when a bitmap allocation fails. This occurs because dbitmap free() is called twice for the same bitmap, once during the allocation failure in dbitmap grow() and again when the process terminates. This can lead to system instability. The issue is triggered within the binder proc dec tmpref function.

Recommendations Update to a version newer than 6.17.0-rc6-dirty.

Exploit

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

BDU:2025-13784

CVE-2025-40028

OPENSUSE-SU-2025:15702-1

OPENSUSE-SU-2026:10301-1

USN-7906-1

USN-7906-2

USN-7906-3

Produtos afetados

Linux Kernel

Referências · 233

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40028.json · Exploit
• https://suse.com/security/cve/CVE-2025-39997 · Nota
• https://suse.com/security/cve/CVE-2025-40016 · Nota
• https://suse.com/security/cve/CVE-2025-68323 · Nota
• https://suse.com/security/cve/CVE-2025-40026 · Nota
• https://suse.com/security/cve/CVE-2025-68758 · Nota
• https://suse.com/security/cve/CVE-2025-40060 · Nota
• https://suse.com/security/cve/CVE-2025-40093 · Nota
• https://suse.com/security/cve/CVE-2025-40041 · Nota
• https://suse.com/security/cve/CVE-2025-68353 · Nota
• https://suse.com/security/cve/CVE-2025-40079 · Nota
• https://suse.com/security/cve/CVE-2025-68765 · Nota
• https://ubuntu.com/security/notices/USN-7906-2 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-40049 · Nota
• https://suse.com/security/cve/CVE-2025-68354 · Nota