PT-2025-49059 · Linux · Linux Kernel

CVE-2025-40232

·

Published

2025-10-02

·

Updated

2025-12-15

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel related to inconsistent iterator handling within the enabled monitors seq ops callbacks. Specifically, some callbacks treat the iterator as a struct rv monitor *, while others treat it as a struct list head *. This inconsistency leads to an incorrect type cast and can cause system crashes. The issue is resolved by converting all iterator handling to use struct list head *, aligning it with available monitors.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Type Confusion

Incorrect Type Conversion or Cast

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-10190
CVE-2025-40232
USN-7920-1
USN-7920-2

Affected Products

Linux Kernel