CVE-2025-40156 — Linux vulnerability

32 documents6 sources
Severity
3.2LOWOSV
No vector
EPSS
0.0%
top 94.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelDebian Linux+1 more
Timeline
PublishedNov 12
Latest updateApr 9

Description

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() The drv->sram_reg pointer could be set to ERR_PTR(-EPROBE_DEFER) which would lead to a error pointer dereference. Use IS_ERR_OR_NULL() to check that the pointer is valid.

Affected Packages6 packages

▶Linuxlinux/linux_kernel6.1.0 — 6.1.156+3
▶Debianlinux/linux_kernel< 6.1.158-1+2
▶Ubuntulinux/linux_kernel< 6.8.0-106.106+1
▶CVEListV5linux/linuxe09bd5757b5227d6804b30c58d4587f7f87d1afa — 9cc23e221f392304b7b8aad213812564ddf6517e+5
▶debiandebian/linux< linux 6.1.158-1 (bookworm)

🔴Vulnerability Details

16
OSV
linux-raspi, linux-raspi-realtime vulnerabilities↗2026-04-01
▶
OSV
linux-azure-6.8 vulnerabilities↗2026-03-25
▶
OSV
linux-azure vulnerabilities↗2026-03-25
▶
OSV
linux-aws-6.8 vulnerabilities↗2026-03-23
▶
OSV
linux-realtime, linux-realtime-6.8 vulnerabilities↗2026-03-17
▶

📋Vendor Advisories

15
Ubuntu
Linux kernel (Azure FIPS) vulnerabilities↗2026-04-09
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2026-04-01
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (AWS) vulnerabilities↗2026-03-23
▶