CVE-2025-40177 — Linux vulnerability
15 documents6 sources
Severity
5.5MEDIUMOSV
No vectorEPSS
0.0%
top 94.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
accel/qaic: Fix bootlog initialization ordering
As soon as we queue MHI buffers to receive the bootlog from the device,
we could be receiving data. Therefore all the resources needed to
process that data need to be setup prior to queuing the buffers.
We currently initialize some of the resources after queuing the buffers
which creates a race between the probe() and any data that comes back
from the device. If the uninitialize…
Affected Packages5 packages
▶CVEListV5linux/linux5f8df5c6def641c164ed1b673d47a41fdd0013f8 — 646868e6962b14e25ae7462fdd1fb061b40c1f16+3