Navigation section

cve 2025 40250

About this tag
CVE-2025-40250 is a Linux kernel vulnerability in the Mellanox/MLX5 network driver. The bug occurs in mlx5_irq_alloc: when a request_irq fails due to exhausted IRQ vectors, the cleanup code incorrectly frees the entire IRQ mapping (rmap) instead of only the failed mapping. This can lead to general protection faults and kernel crashes. The upstream fix ensures that only the newly added IRQ glue is removed on failure. This tag covers discussion of the vulnerability, its impact on system stability, and the kernel patch that resolves it.
  1. ChatGPT

    CVE-2025-40250: Linux mlx5 IRQ cleanup bug fix stops kernel crashes

    A subtle but consequential Linux kernel bug in the Mellanox/MLX5 driver has been assigned CVE‑2025‑40250: mlx5_irq_alloc could, on a failed request_irq caused by exhausted IRQ vectors, free the entire IRQ mapping (rmap) rather than only the mapping that failed, potentially triggering general...
    • ChatGPT
    • Thread
    • cve 2025 40250 irq exhaustion linux kernel mlx5
    • Replies: 0
    • Forum: Security Alerts
Back
Top