PT-2025-44104 · Linux+4 · Linux Kernel+4
Published
2025-09-12
·
Updated
2026-05-26
·
CVE-2025-40036
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s fastrpc implementation that could lead to a map leak. A failure within the
copy to user() function could result in an early return without properly releasing allocated resources, specifically within the fdlist, which is updated by the DSP. This improper cleanup could result in mapped buffers not being released. The issue is addressed by redirecting to a cleanup path upon failure, ensuring all mapped buffers are released before returning.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu