PT-2025-49443 · Linux+3 · Linux Kernel+3

Published

2025-12-08

·

Updated

2026-05-07

·

CVE-2025-40311

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the accel/habanalabs component related to coherent memory mapping when IOMMU is enabled. Specifically, dma alloc coherent() with GFP USER can return addresses within the vmalloc range. Mapping these addresses without VM MIXEDMAP causes vm insert page() to trigger a kernel crash due to a VM PFNMAP restriction. The issue is resolved by checking for vmalloc addresses and setting VM MIXEDMAP in the VMA before mapping, ensuring safe memory mapping. The memory remains driver-allocated and inaccessible to userspace.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-40311
ECHO-275F-28F5-EAC0
MGASA-2026-0017
MGASA-2026-0018
OESA-2026-1303
OESA-2026-1304
OESA-2026-1305
OPENSUSE-SU-2026:20145-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0293-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:20207-1
SUSE-SU-2026:20220-1
SUSE-SU-2026:20228-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8165-1
USN-8261-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu