PT-2025-46635 · Linux+3 · Linux Kernel+3
Publicado
2025-08-27
·
Atualizado
2026-05-26
·
CVE-2025-40160
CVSS v2.0
1.7
Baixa
| Vetor | AV:L/AC:L/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue within the xen/events component. A change was made to the
find virq() function to return -EEXIST when a VIRQ is bound to a different CPU than the one provided. The BUG ON() function was removed from bind virq to irq() to allow the error to propagate. This addresses a scenario where per-domain or global VIRQs, intended to be bound to CPU0, might fail during migration off CPU 0. A second call to bind these types of VIRQs is not expected, but the change prevents a fatal error.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Linuxmint
Linux Kernel
Ubuntu