PT-2025-49059 · Linux · Linux Kernel
CVE-2025-40232
·
Published
2025-10-02
·
Updated
2025-12-15
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to inconsistent iterator handling within the
enabled monitors seq ops callbacks. Specifically, some callbacks treat the iterator as a struct rv monitor *, while others treat it as a struct list head *. This inconsistency leads to an incorrect type cast and can cause system crashes. The issue is resolved by converting all iterator handling to use struct list head *, aligning it with available monitors.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Type Confusion
Incorrect Type Conversion or Cast
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel