CVE catalog
CVE-2025-40040
Linux kernel (OEM) vulnerabilities
In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksm_madvise syzkaller discovered the following crash: (kernel BUG) [ 44.607039] ------------[ cut here ]------------ [ 44.607422] kernel BUG at mm/userfaultfd.c:2067! [ 44.608148] Oops: invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI [ 44.608814] CPU: 1 UID: 0 PID: 2475 Comm: reproducer Not tainted 6.16.0-rc6 #1 PREEMPT(none) [ 44.609635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 44.610695] RIP: 0010:userfaultfd_release_all+0x3a8/0x460 <snip other registers, drop unreliable trace> [ 44.617726] Call Trace: [ 44.617926] <TASK> [ 44.619284] userfaultfd_release+0xef/0x1b0 [ 44.620976] __fput+0x3f9/0xb60 [ 44.621240] fput_close_sync+0x110/0x210 [ 44.622222] __x64_sys_close+0x8f/0x120 [ 44.622530] do_syscall_64+0x5b/0x2f0 [ 44.622840] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.623244] RIP: 0033:0x7f365bb3f227 Kernel panics because it detects UFFD inconsistency during userfaultfd_release_all(). Specifically, a VMA which has a valid pointer to vma->vm_userfaultfd_ctx, but no UFFD flags in vma->vm_flags. The inconsistency is caused in ksm_madvise(): when user calls madvise() with MADV_UNMEARGEABLE on a VMA that is registered for UFFD in MINOR mode, it accidentally clears all flags stored in the upper 32 bits of vma->vm_flags. Assuming x86_64 kernel build, unsigned long is 64-bit and unsigned int and int are 32-bit wide. This setup causes the following mishap during the &= ~VM_MERGEABLE assignment. VM_MERGEABLE is a 32-bit constant of type unsigned int, 0x8000'0000. After ~ is applied, it becomes 0x7fff'ffff unsigned int, which is then promoted to unsigned long before the & operation. This promotion fills upper 32 bits with leading 0s, as we're doing unsigned conversion (and even for a signed conversion, this wouldn't help as the leading bit is 0). & operation thus ends up AND-ing vm_flags with 0x0000'0000'7fff'ffff instead of intended 0xffff'ffff'7fff'ffff and hence accidentally clears the upper 32-bits of its value. Fix it by changing `VM_MERGEABLE` constant to unsigned long, using the BIT() macro. Note: other VM_* flags are not affected: This only happens to the VM_MERGEABLE flag, as the other VM_* flags are all constants of type int and after ~ operation, they end up with leading 1 and are thus converted to unsigned long with leading 1s. Note 2: After commit 31defc3b01d9 ("userfaultfd: remove (VM_)BUG_ON()s"), this is no longer a kernel BUG, but a WARNING at the same place: [ 45.595973] WARNING: CPU: 1 PID: 2474 at mm/userfaultfd.c:2067 but the root-cause (flag-drop) remains the same. [akpm@linux-foundation.org: rust bindgen wasn't able to handle BIT(), from Miguel]
- Severity
- Critical · CVSS 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.38% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "linux",
"status": "fixed",
"release": "sid",
"version": "7.2.13-1"
},
{
"name": "linux",
"status": "fixed",
"release": "forky",
"version": "7.2.12-1"
},
{
"name": "linux",
"status": "fixed",
"release": "trixie",
"version": "6.12.107-1"
},
{
"name": "linux",
"status": "fixed",
"release": "trixie-security",
"version": "6.12.113-1"
},
{
"name": "linux",
"status": "fixed",
"release": "bookworm",
"version": "6.1.176-1"
},
{
"name": "linux",
"status": "fixed",
"release": "bookworm-security",
"version": "6.1.190-1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "linux",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "6.17.6-1"
},
{
"bug": null,
"name": "linux",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "6.17.6-1"
},
{
"bug": null,
"name": "linux",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "6.12.57-1"
},
{
"bug": null,
"name": "linux",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "6.1.158-1"
}
],
"distribution_packages": [
{
"name": "linux-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-buildinfo-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-headers-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-headers-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-headers-oem-24.04a",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-headers-oem-24.04b",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-headers-oem-24.04c",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-headers-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-headers-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-oem-24.04a",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-oem-24.04b",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-oem-24.04c",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-uc-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-uc-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-uc-oem-24.04a",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-uc-oem-24.04b",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-uc-oem-24.04c",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-uc-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-uc-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-image-unsigned-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-evdi-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-evdi-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-evdi-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-evdi-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu6-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu6-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu6-oem-24.04a",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu6-oem-24.04b",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu6-oem-24.04c",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu6-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu6-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu7-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu7-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu7-oem-24.04b",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu7-oem-24.04c",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu7-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-ipu7-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-iwlwifi-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-iwlwifi-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-iwlwifi-oem-24.04a",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-iwlwifi-oem-24.04b",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-iwlwifi-oem-24.04c",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-iwlwifi-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-iwlwifi-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-usbio-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-usbio-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-usbio-oem-24.04a",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-usbio-oem-24.04b",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-usbio-oem-24.04c",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-usbio-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-usbio-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-vision-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-vision-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-vision-oem-24.04b",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-vision-oem-24.04c",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-vision-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-modules-vision-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-oem-24.04a",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-oem-24.04b",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-oem-24.04c",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-oem-6.17-headers-6.17.0-1011",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-oem-6.17-tools-6.17.0-1011",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-tools-6.17.0-1011-oem",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-tools-oem-24.04",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-tools-oem-24.04a",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-tools-oem-24.04b",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-tools-oem-24.04c",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-tools-oem-24.04d",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-tools-oem-6.17",
"distro": "ubuntu",
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.17.0-1011.11"
},
{
"name": "linux-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-buildinfo-6.8.0-1035-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-buildinfo-6.8.0-1035-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-headers-6.8.0-1035-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-headers-6.8.0-1035-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-headers-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-headers-nvidia-tegra-6.8",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-headers-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-headers-nvidia-tegra-rt-6.8",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-6.8.0-1035-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-6.8.0-1035-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-nvidia-tegra-6.8",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-nvidia-tegra-rt-6.8",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-uc-6.8.0-1035-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-uc-6.8.0-1035-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-uc-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-uc-nvidia-tegra-6.8",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-uc-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-uc-nvidia-tegra-rt-6.8",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-unsigned-6.8.0-1035-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-image-unsigned-6.8.0-1035-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-modules-6.8.0-1035-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-modules-6.8.0-1035-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-modules-extra-6.8.0-1035-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-modules-extra-6.8.0-1035-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-nvidia-tegra-6.8",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-nvidia-tegra-headers-6.8.0-1035",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-nvidia-tegra-rt-6.8",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-nvidia-tegra-tools-6.8.0-1035",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-tools-6.8.0-1035-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-tools-6.8.0-1035-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-tools-nvidia-tegra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-tools-nvidia-tegra-6.8",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-tools-nvidia-tegra-rt",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux-tools-nvidia-tegra-rt-6.8",
"distro": "ubuntu",
"ranges": [
{
"fixed": "6.8.0-1035.38",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "6.8.0-1035.38"
},
{
"name": "linux_kernel",
"ranges": [
{
"fixed": "6.17.3",
"introduced": "6.13",
"last_affected": "",
"start_excluding": ""
}
],
"ecosystem": "cpe",
"fixed_version": "6.17.3",
"provider_record_id": "NVD-CVE-2025-40040"
},
{
"name": "Kernel",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.6.0"
},
{
"fixed": "5.4.302"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.247"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.197"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.158"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.114"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.55"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.17.3"
}
]
}
],
"versions": [],
"ecosystem": "Linux",
"fixed_version": "5.4.302",
"provider_record_id": "CVE-2025-40040"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [bpftool]Unknown
Source package: [linux]
Details (6)
7.1.0+6.1.176-1· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
7.1.0+6.1.176-1· arm64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
7.5.0+6.12.95-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
7.5.0+6.12.95-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
7.1.0+6.1.180-1· amd64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
7.1.0+6.1.180-1· arm64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [hyperv-daemons]Unknown
Source package: [linux]
Details (6)
6.1.176-1· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.176-1· arm64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· amd64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· arm64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [intel-sdsi]Unknown
Source package: [linux]
Details (1)
6.12.95-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [libcpupower1]Unknown
Source package: [linux]
Details (6)
6.1.176-1· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.176-1· arm64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· amd64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· arm64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [libcpupower-dev]Unknown
Source package: [linux]
Details (6)
6.1.176-1· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.176-1· arm64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· amd64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· arm64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-bpf-dev]Unknown
Source package: [linux]
Details (2)
6.12.95-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-compiler-gcc-12-x86]Unknown
Source package: [linux]
Details (2)
6.1.176-1· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· amd64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-config-6.1]Unknown
Source package: [linux]
Details (4)
6.1.176-1· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.176-1· arm64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· amd64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· arm64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-cpupower]Unknown
Source package: [linux]
Details (6)
6.1.176-1· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.176-1· arm64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· amd64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· arm64 · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-doc]Unknown
Source package: [linux]
Details (32)
6.1.170-3· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.170-3· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.176-1· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.176-1· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.43-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.43-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.57-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.57-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.63-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.63-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.69-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.69-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.73-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.73-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.74-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.74-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.85-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.85-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.86-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.86-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.88-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.88-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.90-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.90-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.90-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.90-2~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.94-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.94-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.12.95-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· all · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· all · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-doc-6.1]Unknown
Source package: [linux]
Details (6)
6.1.170-3· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.170-3· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.176-1· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.176-1· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· all · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.180-1· all · bookworm-securityFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-headers-6.1.0-47-amd64]Unknown
Source package: [linux]
Details (1)
6.1.170-3· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-headers-6.1.0-47-arm64]Unknown
Source package: [linux]
Details (1)
6.1.170-3· arm64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-headers-6.1.0-47-cloud-amd64]Unknown
Source package: [linux]
Details (1)
6.1.170-3· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-headers-6.1.0-47-cloud-arm64]Unknown
Source package: [linux]
Details (1)
6.1.170-3· arm64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-headers-6.1.0-47-common]Unknown
Source package: [linux]
Details (2)
6.1.170-3· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.170-3· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-headers-6.1.0-47-common-rt]Unknown
Source package: [linux]
Details (2)
6.1.170-3· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
6.1.170-3· all · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-headers-6.1.0-47-rt-amd64]Unknown
Source package: [linux]
Details (1)
6.1.170-3· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-headers-6.1.0-47-rt-arm64]Unknown
Source package: [linux]
Details (1)
6.1.170-3· arm64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
- [linux-headers-6.1.0-50-amd64]Unknown
Source package: [linux]
Details (1)
6.1.176-1· amd64 · bookwormFixed · Fixed:
6.1.158-1usn · linux · debian · bookworm; usn · linux · debian · 12
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20561-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2025-40040]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-40040]
- [https://security-tracker.debian.org/tracker/CVE-2025-40040]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-40040.json]
- [https://ubuntu.com/security/notices/USN-8048-1]
- [https://ubuntu.com/security/notices/USN-8781-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0349.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]