PT-2025-46742

CVE-2025-40185

·

Published

2025-10-01

·

Updated

2026-10-21

Description by

CVSS 2.0
4.6
Medium
MetricsAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel where a reserved XArray entry is not released following a failure during adapter allocation within the ice adapter new() function. This can lead to subsequent insertions at the same index returning an error, potentially resulting in NULL pointer dereferences. The issue occurs when ice adapter new() fails after xa insert() has been called, and the reserved XArray entry is not properly released. The recommended resolution involves reordering operations to check for existing adapters, reserve the XArray slot, allocate the adapter, and then store the adapter.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025:22405
ALSA-2025:22854
CLSA-2026-1778787063
INFSA-2025_22405
OPENSUSE-SU-2025:20172-1
SUSE-SU-2025:4393-1
SUSE-SU-2025:4516-1
SUSE-SU-2025:4517-1
SUSE-SU-2026:20012-1
SUSE-SU-2026:20015-1
SUSE-SU-2026:20021-1
SUSE-SU-2026:20562-1
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
Found an issue in the description? Have something to add? Feel free to write us 👾