PT-2025-44101 · Linux · Linux Kernel

Published 2025-10-28 · Updated 2025-10-29 · CVE-2025-40033

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the remoteproc subsystem, specifically within the

pru rproc set ctable()

function. This function could potentially dereference a NULL pointer because it accessed

rproc->priv

before a proper error check. The issue has been addressed by ensuring that a NULL

rproc

pointer is never dereferenced.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-40033

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-40033 · Security Note
• https://git.kernel.org/stable/c/d41e075b077142bb9ae5df40b9ddf9fd7821a811 · Note
• https://t.me/msrcreports/2233 · Telegram Post
• https://git.kernel.org/stable/c/f0164d89950120281f2446be9687cffa1e43dbcc · Note
• https://git.kernel.org/stable/c/c9b6d789591f2bd57b0cbd59592493e11e029ed4 · Note
• https://git.kernel.org/stable/c/66821fdb723d55b25482a76b92d17d416efeae6b · Note
• https://twitter.com/CVEnew/status/1983149485762195550 · Twitter Post