CVE-2025-40202

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel has a flaw in how user message limits are handled within the Intelligent Platform Management Interface (IPMI). The existing implementation had issues with incorrect message counting and a use-after-free condition. The rework restructures the message handling process, specifically within the receive message allocation routine, to improve refcounting and user message limit calculations, resulting in a cleaner and safer implementation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.