PT-2025-44095 · Linux · Linux Kernel

Published 2025-09-15 · Updated 2026-03-13 · CVE-2025-40028

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc6-dirty

Description The Linux kernel contains a flaw in the binder subsystem related to bitmap handling. A process attempting to expand its proc->dmap may experience a double-free error when a bitmap allocation fails. This occurs because dbitmap free() is called twice for the same bitmap, once during the allocation failure in dbitmap grow() and again when the process terminates. This can lead to system instability. The issue is triggered within the binder proc dec tmpref function.

Recommendations Update to a version newer than 6.17.0-rc6-dirty.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2025-13784

CVE-2025-40028

OPENSUSE-SU-2025:15702-1

OPENSUSE-SU-2026:10301-1

USN-7906-1

USN-7906-2

USN-7906-3

Affected Products

Linux Kernel

References · 233

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40028.json · Exploit
• https://ubuntu.com/security/notices/USN-7906-2 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-40028 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-40028 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13784 · Security Note
• https://ubuntu.com/security/CVE-2025-40108 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40028 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40109 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-40028 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40026 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2025-40028 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7906-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40028 · Security Note
• https://osv.dev/vulnerability/USN-7906-2 · Vendor Advisory