CVE-2025-23140

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error

After devm_request_irq() fails with error in pci_endpoint_test_request_irq(), the pci_endpoint_test_free_irq_vectors() is called assuming that all IRQs have been released.

However, some requested IRQs remain unreleased, so there are still /proc/irq/* entries remaining, and this results in WARN() with the following message:

remove_proc_entry: removing non-empty directory 'irq/30', leaking at least 'pci-endpoint-test.0' WARNING: CPU: 0 PID: 202 at fs/proc/generic.c:719 remove_proc_entry +0x190/0x19c

To solve this issue, set the number of remaining IRQs to test->num_irqs, and release IRQs in advance by calling pci_endpoint_test_release_irq().

[kwilczynski: commit log]

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= e03327122e2c8e6ae4565ef5b3d3cbe4364546a1, < 705be96504779e4a333ea042b4779ea941f0ace9; >= e03327122e2c8e6ae4565ef5b3d3cbe4364546a1, < e516e187bf32d8decc7c7d0025ae4857cad13c0e; >= e03327122e2c8e6ae4565ef5b3d3cbe4364546a1, < 54c9f299ad7d7c4be5d271ed12d01a59e95b8907; >= e03327122e2c8e6ae4565ef5b3d3cbe4364546a1, < 9d5118b107b1a2353ed0dff24404aee2e6b7ca0a; >= e03327122e2c8e6ae4565ef5b3d3cbe4364546a1, < 5a4b7181213268c9b07bef8800905528435db44a; >= e03327122e2c8e6ae4565ef5b3d3cbe4364546a1, < 0557e70e2aeba8647bf5a950820b67cfb86533db; >= e03327122e2c8e6ae4565ef5b3d3cbe4364546a1, < 770407f6173f4f39f4e2c1b54422b79ce6c98bdb; >= e03327122e2c8e6ae4565ef5b3d3cbe4364546a1, < f6cb7828c8e17520d4f5afb416515d3fae1af9a9
LinuxLinux4.19

References

Timeline

Published
May 1, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-231415.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory acceCVE-2025-231427.8In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg scCVE-2025-231435.5In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. CVE-2025-231445.5In the Linux kernel, the following vulnerability has been resolved: backlight: led_bl: Hold led_access lock when calling led_sysfs_disable(CVE-2025-231455.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subflow When testing valkey CVE-2025-231465.5In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The off_gpioCVE-2025-231475.5In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi() The I3C master dCVE-2025-231485.5In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_prCVE-2025-231495.5In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended Checking TPM_CHIP_FLAG_SUSPENDECVE-2025-231505.5In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-CVE-2025-231514.7In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queue_buf A client drivCVE-2025-231525.5In the Linux kernel, the following vulnerability has been resolved: arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() F
CVE-2025-23140: Medium severity, CVSS 5.5 | Vulnix