> CVE-2025-40177

« BACK_TO_HOME
PUBLISHED
2025-11-12 11:15
MODIFIED
2025-11-12 11:15
EPSS (Prob. Exploit)
0.20%
Top 91.1%
DATA SOURCES:
NVD 🔗 2025-11-12 RED HAT 🔗 2025-11-16 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-03-01

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix bootlog initialization ordering As soon as we queue MHI buffers to receive the bootlog from the device, we could be receiving data. Therefore all the resources needed to process that data need to be setup prior to queuing the buffers. We currently initialize some of the resources after queuing the buffers which creates a race between the probe() and any data that comes back from the device. If the uninitialized resources are accessed, we could see page faults. Fix the init ordering to close the race.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

accel/qaic: Fix bootlog initialization ordering

AFFECTED PACKAGES:
Unknown / Unknown
129 versions affected
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
12/11/2025 11:15
Source: NVD
📊 ENRICHISSEMENT 19/01/2026 17:36
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 16/11/2025 04:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 16/11/2025 04:01
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 9 months ago

> REFERENCES

https://git.kernel.org/stable/c/48814afc7372f96a9584125c8508dffc88d1d378
https://git.kernel.org/stable/c/646868e6962b14e25ae7462fdd1fb061b40c1f16
https://git.kernel.org/stable/c/fd6e385528d8f85993b7bfc6430576136bb14c65
« BACK_TO_HOME