cve 2025 40197

CVE-2025-40197 is a Linux kernel vulnerability in the media controller (mc) subsystem. The defect involves clearing a device minor number at the wrong time during device teardown, creating a race condition and cleanup correctness issue. The fix has been upstreamed and is being propagated to distribution kernels and vendor images. This tag covers discussions about the vulnerability, its impact on Linux systems, and the patch process. While the vulnerability is in Linux, it may affect Windows users running Linux virtual machines or WSL environments. The tag includes technical analysis of the race condition and guidance on applying the fix.