PT-2025-46640

CVE-2025-40165

·

Published

2025-08-21

·

Updated

2026-10-17

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc4-next-20250704-06511-gff0e002d480a
Description The Linux kernel contains an issue within the nxp imx8-isi m2m subsystem. An imbalance in streamon/streamoff calls, such as exiting an application with Ctrl+C during streaming, can prevent the m2m usage count from reaching zero, leading to memory leaks and preventing the ISI channel from being freed. Additionally, if the input line width exceeds 2K, a warning is triggered. The issue is addressed by moving streaming preparation and cleanup to the vb2 .prepare streaming() and .unprepare streaming() operations.
Recommendations Update to a version later than 6.16.0-rc4-next-20250704-06511-gff0e002d480a.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
OPENSUSE-SU-2025:20172-1
SUSE-SU-2026:20012-1
SUSE-SU-2026:20015-1
SUSE-SU-2026:20021-1
SUSE-SU-2026:20562-1
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8165-1
USN-8261-1
Found an issue in the description? Have something to add? Feel free to write us 👾