PT-2025-46630 · Linux+2 · Linux Kernel+2

Published 2025-08-18 · Updated 2026-05-07 · CVE-2025-40155

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0 #191

Description The Linux kernel contains a flaw within the iommu/vt-d subsystem related to debugfs and legacy mode page table dump logic. In legacy mode, the SSPTPTR is not properly checked, potentially leading to a general protection fault when walking the page table. This can occur if the TT value is not 00b or 01b, resulting in an uninitialized or zero SSPTPTR. This condition can cause a kernel oops.

Recommendations Update to Linux kernel version 6.16.0 #191 or later.

Exploit

Fix

Access of Uninitialized Pointer

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-824

CWE-704

Related Identifiers

BDU:2025-14945

CVE-2025-40155

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

USN-8095-1

USN-8095-2

USN-8095-3

USN-8095-4

USN-8095-5

USN-8100-1

USN-8125-1

USN-8126-1

USN-8165-1

USN-8261-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 1571

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40155.json · Exploit
• https://ubuntu.com/security/CVE-2025-40269 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21833 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39788 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40030 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38251 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68319 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40098 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38702 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8030-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40359 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40284 · Vendor Advisory