CVE-2025-40185 — NULL Pointer Dereference in Linux
Severity
4.4MEDIUM
No vectorEPSS
0.0%
top 93.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
ice: ice_adapter: release xa entry on adapter allocation failure
When ice_adapter_new() fails, the reserved XArray entry created by
xa_insert() is not released. This causes subsequent insertions at
the same index to return -EBUSY, potentially leading to
NULL pointer dereferences.
Reorder the operations as suggested by Przemek Kitszel:
1. Check if adapter already exists (xa_load)
2. Reserve the XArray slot (xa_reserve)
3. Allo…
Affected Packages5 packages
▶CVEListV5linux/linux0f0023c649c7bc50543fbe6e1801eb6357b8bd63 — 7b9269de9815fc34d93dab90bd5169bacbe78e70+3