CVE-2025-40185: ice: ice_adapter: release xa entry on adapter allocation failure
In the Linux kernel, the following vulnerability has been resolved:
ice: iceadapter: release xa entry on adapter allocation failure
When iceadapternew() fails, the reserved XArray entry created by xainsert() is not released. This causes subsequent insertions at the same index to return -EBUSY, potentially leading to NULL pointer dereferences.
Reorder the operations as suggested by Przemek Kitszel: 1. Check if adapter already exists (xaload) 2. Reserve the XArray slot (xareserve) 3. Allocate the adapter (iceadapternew) 4. Store the adapter (xastore)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40185?
The severity of CVE-2025-40185 is categorized as moderate due to potential resource mismanagement in the Linux kernel.
How do I fix CVE-2025-40185?
To fix CVE-2025-40185, upgrade to the latest patched version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2025-40185?
CVE-2025-40185 affects the Linux kernel, particularly versions where the ice_driver implementation is used.
What does CVE-2025-40185 involve?
CVE-2025-40185 involves the failure to release a reserved XArray entry upon adapter allocation failure, leading to potential issues.
When was CVE-2025-40185 disclosed?
CVE-2025-40185 was disclosed as part of regular Linux kernel updates and fix announcements.