PT-2025-46630 · Linux+2 · Linux Kernel+2
CVE-2025-40155
·
Published
2025-08-18
·
Updated
2026-08-30
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.16.0 #191
Description
The Linux kernel contains a flaw within the iommu/vt-d subsystem related to debugfs and legacy mode page table dump logic. In legacy mode, the SSPTPTR is not properly checked, potentially leading to a general protection fault when walking the page table. This can occur if the TT value is not 00b or 01b, resulting in an uninitialized or zero SSPTPTR. This condition can cause a kernel oops.
Recommendations
Update to Linux kernel version 6.16.0 #191 or later.
Exploit
Fix
Access of Uninitialized Pointer
Incorrect Type Conversion or Cast
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu