PT-2025-46640 · Linux+3 · Linux Kernel+3

Published 2025-08-21 · Updated 2026-05-07 · CVE-2025-40165

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc4-next-20250704-06511-gff0e002d480a

Description The Linux kernel contains an issue within the nxp imx8-isi m2m subsystem. An imbalance in streamon/streamoff calls, such as exiting an application with Ctrl+C during streaming, can prevent the m2m usage count from reaching zero, leading to memory leaks and preventing the ISI channel from being freed. Additionally, if the input line width exceeds 2K, a warning is triggered. The issue is addressed by moving streaming preparation and cleanup to the vb2 .prepare streaming() and .unprepare streaming() operations.

Recommendations Update to a version later than 6.16.0-rc4-next-20250704-06511-gff0e002d480a.

Exploit

Fix

Weakness Enumeration

CWE-399

CWE-371

Related Identifiers

BDU:2025-16439

CVE-2025-40165

OPENSUSE-SU-2025:20172-1

SUSE-SU-2026:20012-1

SUSE-SU-2026:20015-1

SUSE-SU-2026:20021-1

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

USN-8095-1

USN-8095-2

USN-8095-3

USN-8095-4

USN-8095-5

USN-8100-1

USN-8125-1

USN-8126-1

USN-8165-1

USN-8261-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

Imx8-Isi

References · 1799

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40165.json · Exploit
• https://ubuntu.com/security/CVE-2025-40269 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21833 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39788 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40030 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38251 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68319 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40098 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38702 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8030-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40359 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40284 · Vendor Advisory