PT-2025-49080 · Linux+3 · Linux Kernel+3

CVE-2025-40250

·

Publicado

2025-11-17

·

Atualizado

2026-05-26

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The mlx5 irq alloc() function in the Linux kernel could inadvertently free the entire rmap, leading to a crash when request irq() fails due to exhausted IRQ vectors. This issue occurs when both fwctl and rds configurations are enabled. The fix modifies the cleanup process to remove only the specific IRQ mapping that was just added, preventing the removal of other valid mappings and ensuring precise cleanup of the failed IRQ allocation's associated glue object. The error manifests as a general protection fault during IRQ allocation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

AZL-71417
BDU:2026-10188
CVE-2025-40250
MGASA-2026-0017
MGASA-2026-0018
OESA-2026-1303
OESA-2026-1304
OESA-2026-1305
OPENSUSE-SU-2026:20145-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:20207-1
SUSE-SU-2026:20220-1
SUSE-SU-2026:20228-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20564-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8152-1
USN-8165-1
USN-8261-1

Produtos afetados

Debian
Linuxmint
Linux Kernel
Ubuntu