CVE-2025-40249

highPriorität · verfolgen · 0EPSS 0.001 · 4. PerzentilDEEURU
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.14% (4th) EPSS
CVSS 7 · high
Is it mine?
23 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: make sure the cdev fd is still active before emitting events With the final call to fput() on a file descriptor, the release action may be deferred and scheduled on a work queue. The reference count of that descriptor is still zero and it must not be used. It's possible that a GPIO change, we want to notify the user-space about, happens AFTER the reference count on the file descriptor associated with the character device went down to zero but BEFORE the .release() callback was called from the workqueue and so BEFORE we unregistered from the notifier. Using the regular get_file() routine in this situation triggers the following warning: struct file::f_count incremented from zero; use-after-free condition present! So use the get_file_active() variant that will return NULL on file descriptors that have been or are being released.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobenkernel-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-abi-stablelists-0:6.12.0-124.43.1.el10_1.noarch as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-core-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-cross-headers-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-debug-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-debug-core-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-debug-devel-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-debug-devel-matched-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-debug-modules-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-debug-modules-core-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-debug-modules-extra-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-debug-uki-virt-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-devel-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-devel-matched-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-doc-0:6.12.0-124.43.1.el10_1.noarch as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-headers-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-modules-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-modules-core-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-modules-extra-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-modules-extra-matched-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-core-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-debug-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-debug-core-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-debug-devel-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-debug-modules-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-debug-modules-core-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-debug-modules-extra-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-devel-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-modules-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-modules-core-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-modules-extra-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-tools-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-tools-libs-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-tools-libs-devel-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-uki-virt-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-uki-virt-addons-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenlibperf-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenperf-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenpython3-perf-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenrtla-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenrv-0:6.12.0-124.43.1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.5–7.8

v3.17highAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HsecondaryAusnutzbarkeit 1.8 · Auswirkung 5.9
v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · SUSE Product Security
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-910USCWE-911US
04

betroffene Produkte (23)

Betroffene Produkte und Versionsbereiche.

20 von 23 angezeigt
05

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2026:4012security update for kernel2026-03-09csaf · suse_csafDE

    security update for kernel

  • WID-SEC-W-2025-2747Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2025-12-04csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder weitere, nicht spezifizierte Auswirkungen zu erlangen.

06

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundsuse_csafNVDCVE.orgMITRE
veröffentlicht 2025-12-04geändert 2026-10-19
08

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan