CVE-2025-40226: firmware: arm_scmi: Account for failed debug initialization
In the Linux kernel, the following vulnerability has been resolved:
firmware: armscmi: Account for failed debug initialization
When the SCMI debug subsystem fails to initialize, the related debug root will be missing, and the underlying descriptor will be NULL.
Handle this fault condition in the SCMI debug helpers that maintain metrics counters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40226?
CVE-2025-40226 has a severity rating that depends on the specific context of its impact within the Linux kernel.
How do I fix CVE-2025-40226?
To fix CVE-2025-40226, update your Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2025-40226?
CVE-2025-40226 affects systems running the vulnerable versions of the Linux kernel that use the SCMI debug subsystem.
What type of attack does CVE-2025-40226 enable?
CVE-2025-40226 allows potential exploitation in scenarios where the SCMI debug subsystem is critical for monitoring or debugging purposes.
Is CVE-2025-40226 a zero-day vulnerability?
CVE-2025-40226 is not classified as a zero-day vulnerability since it has been identified and has a fix available.