PT-2025-49051 · Linux+2 · Linux Kernel+2

Published 2025-12-04 · Updated 2026-02-24 · CVE-2025-40224

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel driver allocates memory for sensor data using devm kzalloc(), but lacks a check to ensure the allocation was successful. If memory allocation fails, attempting to dereference the resulting NULL pointer can cause a kernel crash. A NULL pointer check has been added, and the function now returns -ENOMEM to handle allocation failures correctly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-40224

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 391

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40224.json · Exploit
• https://ubuntu.com/security/CVE-2025-40153 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40066 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40331 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40063 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40049 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40315 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40223 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68246 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory