CVE-2025-40319— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1211 · Exploitation for StealthAffected Version Matrix 16
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 457f44363a8894135c85b7a9afd2bd8196db24ab< 47626748a2a00068dbbd5836d19076637b4e235b | affected |
457f44363a8894135c85b7a9afd2bd8196db24ab< de2ce6b14bc3e565708a39bdba3ef9162aeffc72 | affected | ||
457f44363a8894135c85b7a9afd2bd8196db24ab< e1828c7a8d8135e21ff6adaaa9458c32aae13b11 | affected | ||
457f44363a8894135c85b7a9afd2bd8196db24ab< 6451141103547f4efd774e912418a3b4318046c6 | affected | ||
457f44363a8894135c85b7a9afd2bd8196db24ab< 10ca3b2eec384628bc9f5d8190aed9427ad2dde6 | affected | ||
457f44363a8894135c85b7a9afd2bd8196db24ab< 430e15544f11f8de26b2b5109c7152f71b78295e | affected | ||
457f44363a8894135c85b7a9afd2bd8196db24ab< 4e9077638301816a7d73fa1e1b4c1db4a7e3b59c | affected | ||
5.8 | affected | ||
| … +8 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-40319の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
bpf: Sync pending IRQ work before freeing ring buffer
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: bpf: Sync pending IRQ work before freeing ring buffer Fix a race where irq_work can be queued in bpf_ringbuf_commit() but the ring buffer is freed before the work executes. In the syzbot reproducer, a BPF program attached to sched_switch triggers bpf_ringbuf_commit(), queuing an irq_work. If the ring buffer is freed before this work executes, the irq_work thread may accesses freed memory. Calling `irq_work_sync(&rb->work)` ensures that all pending irq_work complete before freeing the buffer.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未同步挂起的IRQ工作，可能导致内存损坏。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2025-40319の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-40319のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-12-08 · 82 CVEs total
| CVE-2023-53751 | 9.8 CRITICAL | cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname |
| CVE-2025-40320 | 9.8 CRITICAL | smb: client: fix potential cfid UAF in smb2_query_info_compound |
| CVE-2023-53769 | 9.3 CRITICAL | virt/coco/sev-guest: Double-buffer messages |
| CVE-2025-40318 | 8.8 HIGH | Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once |
| CVE-2023-53764 | 8.8 HIGH | wifi: ath12k: Handle lock during peer_id find |
| CVE-2023-53762 | 8.8 HIGH | Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync |
| CVE-2025-40292 | 8.4 HIGH | virtio-net: fix received length check in big packets |
| CVE-2025-40309 | 8.0 HIGH | Bluetooth: SCO: Fix UAF on sco_conn_free |
| CVE-2025-40302 | 7.8 HIGH | media: videobuf2: forbid remove_bufs when legacy fileio is active |
| CVE-2023-53763 | 7.8 HIGH | Revert "f2fs: fix to do sanity check on extent cache correctly" |
| CVE-2023-53768 | 7.8 HIGH | regmap-irq: Fix out-of-bounds access when allocating config buffers |
| CVE-2025-40297 | 7.8 HIGH | net: bridge: fix use-after-free due to MST port state bypass |
| CVE-2022-50630 | 7.8 HIGH | mm: hugetlb: fix UAF in hugetlb_handle_userfault |
| CVE-2022-50623 | 7.8 HIGH | fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() |
| CVE-2023-53759 | 7.8 HIGH | HID: hidraw: fix data race on device refcount |
| CVE-2025-40317 | 7.8 HIGH | regmap: slimbus: fix bus_context pointer in regmap init calls |
| CVE-2023-53747 | 7.8 HIGH | vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF |
| CVE-2025-40323 | 7.8 HIGH | fbcon: Set fb_display[i]->mode to NULL when the mode is released |
| CVE-2023-53753 | 7.8 HIGH | drm/amd/display: fix mapping to non-allocated address |
| CVE-2023-53752 | 7.8 HIGH | net: deal with integer overflows in kmalloc_reserve() |
Showing 20 of 82 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-68081
KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to - CVE-2026-68082
libceph: fix two unsafe bare decodes in decode_lockers() - CVE-2026-68480
x86/bugs: Make Safe-RET robust against interrupt injection - CVE-2026-64604
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is - CVE-2026-64602
iio: adc: spear: Initialize completion before requesting IRQ
同じベンダー: Linux
- CVE-2026-68081
KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to - CVE-2026-68082
libceph: fix two unsafe bare decodes in decode_lockers() - CVE-2026-68480
x86/bugs: Make Safe-RET robust against interrupt injection - CVE-2026-64604
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is - CVE-2026-64602
iio: adc: spear: Initialize completion before requesting IRQ
V. CVE-2025-40319へのコメント
まだコメントはありません