PT-2025-42706 · Linux+4 · Linux Kernel+4
Published
2025-09-29
·
Updated
2026-05-07
·
CVE-2025-40001
CVSS v2.0
4.3
Medium
| Vector | AV:L/AC:L/Au:M/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Marvell SAS/SATA controller within the Linux kernel where a use-after-free condition can occur during device detachment. Specifically, the
cancel delayed work() function may fail to cancel a delayed work item if it is already running, leading to attempts to access freed memory within the mvs work queue() function after it has been deallocated by mvs free(). This issue arises from a race condition during the removal of the controller. The original code called cancel delayed work(), but replacing it with cancel delayed work sync() ensures proper cancellation and completion of the work item before memory deallocation. The issue was identified through static analysis.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Marvell Sas/Sata Controller
Ubuntu