cve 2025 40251

CVE-2025-40251 is a Linux kernel vulnerability in the devlink rate node cleanup logic. The function devl_rate_nodes_destroy fails to clear the devlink_rate->parent pointer after decrementing the parent's reference count, leaving a dangling pointer. This can trigger refcount warnings and kernel instability in drivers such as netdevsim and mlx5. The issue is narrow in scope but affects systems using these drivers. While the vulnerability is in the Linux kernel, it may be relevant to Windows users running Linux virtual machines or WSL environments. The fix involves properly clearing the parent pointer during teardown to prevent dangling references.