First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-40145

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI/pwrctrl: Fix double cleanup on devm_add_action_or_reset() failure

When devm_add_action_or_reset() fails, it calls the passed cleanup function. Hence the caller must not repeat that cleanup.

Replace the "goto err_regulator_free" by the actual freeing, as there will never be a need again for a second user of this label.

Metrics

No CVSS score has been published yet.

Affected software

Vendor	Product	Versions
Linux	Linux	>= 75996c92f4de309f855471927e6489f5a354cfd4, < 77732c58fef6247b71493dc3997af0ec0aaad5c7; >= 75996c92f4de309f855471927e6489f5a354cfd4, < ab81f2f79c683c94bac622aafafbe8232e547159
Linux	Linux	6.15

References

Timeline

Published: Nov 12, 2025
Last modified: Oct 19, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-40146In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix potential deadlock while nr_requests grown Allocate and fr CVE-2025-40147In the Linux kernel, the following vulnerability has been resolved: blk-throttle: fix access race during throttle policy activation On rep CVE-2025-40148In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dc_stream cursor attribute CVE-2025-401497.8In the Linux kernel, the following vulnerability has been resolved: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). ge CVE-2025-40157.5A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by CVE-2025-40150In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid migrating empty section It reports a bug from devic CVE-2025-401517.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: No support of struct argument in trampoline programs T CVE-2025-40152In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix bootup splat with separate_gpu_drm modparam The drm_gem_f CVE-2025-40153In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When CVE-2025-40154In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an inv CVE-2025-401557.3In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy m CVE-2025-40156In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe

CVE-2025-40145: Unscored | Vulnix