PT-2025-45574 · Linux+1 · Linux Kernel+3

Published 2025-11-09 · Updated 2025-12-11 · CVE-2025-40108

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc1-00004-g53e760d89498

Description The Linux kernel contained an issue within the serial component, specifically related to Qualcomm Geni drivers. A regression was introduced by commits 1afa70632c39 and 86fa39dd6fb7, causing tasks to hang on Qualcomm RB1 boards (QRB2210) and preventing serial communication during boot. This resulted in tasks becoming blocked for extended periods. The issue was initially reported on August 12th and was not immediately addressed. A subsequent fix attempt proved ineffective, leading to the reversion of the problematic commits. The blocked task occurs within the async run entry fn workqueue. The rpm resume function and pm runtime resume function are also involved in the call trace.

Recommendations Versions prior to 6.17.0-rc1-00004-g53e760d89498 should be updated.

Exploit

Related Identifiers

CVE-2025-40108

USN-7906-1

USN-7906-2

USN-7906-3

Affected Products

Linux Kernel

Qrb2210

Qualcomm Geni

Qualcomm Rb1

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40108.json · Exploit
• https://ubuntu.com/security/CVE-2025-40026 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-40108 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40028 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7906-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40025 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40027 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-40108 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-40108 · Security Note
• https://osv.dev/vulnerability/USN-7906-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40108 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7906-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7906-3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40108 · Security Note
• https://osv.dev/vulnerability/USN-7906-1 · Vendor Advisory