CVE-2025-40136

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/qm - request reserved interrupt for virtual function

The device interrupt vector 3 is an error interrupt for physical function and a reserved interrupt for virtual function. However, the driver has not registered the reserved interrupt for virtual function. When allocating interrupts, the number of interrupts is allocated based on powers of two, which includes this interrupt. When the system enables GICv4 and the virtual function passthrough to the virtual machine, releasing the interrupt in the driver triggers a warning.

The WARNING report is: WARNING: CPU: 62 PID: 14889 at arch/arm64/kvm/vgic/vgic-its.c:852 its_free_ite+0x94/0xb4

Therefore, register a reserved interrupt for VF and set the IRQF_NO_AUTOEN flag to avoid that warning.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe, < e0a82361cef20380b1c0f342c7e92f8ddabeefc2; >= 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe, < 5f75857ed634d04266301d7a4f695a7deeb9bfdc; >= 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe, < 24315474ca913c0693939ab74b389ee04c7d3020; >= 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe, < 854da2b0df1654d63963d587b12fec6068d89643; >= 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe, < 9228facb308157ac0bdd264b873187896f7a9c7a
LinuxLinux6.1

References

Timeline

Published
Nov 12, 2025
Last modified
Oct 30, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-40137In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate first page in error path of f2fs_truncate() syzbCVE-2025-40138In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid NULL pointer dereference in f2fs_check_quota_consistCVE-2025-401397.8In the Linux kernel, the following vulnerability has been resolved: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). smCVE-2025-40149.8A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability CVE-2025-401408.8In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast CVE-2025-401418.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on iso_conn_free This attempt to fix CVE-2025-40142In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPCVE-2025-40143In the Linux kernel, the following vulnerability has been resolved: bpf: dont report verifier bug for missing bpf_scc_visit on speculative CVE-2025-40145In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Fix double cleanup on devm_add_action_or_reset() failure CVE-2025-40146In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix potential deadlock while nr_requests grown Allocate and frCVE-2025-40147In the Linux kernel, the following vulnerability has been resolved: blk-throttle: fix access race during throttle policy activation On repCVE-2025-40148In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dc_stream cursor attribute
CVE-2025-40136: Unscored | Vulnix