CVE-2025-40262

HighCVSS 7.8/10Last modified Oct 18, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: imx_sc_key - fix memory corruption on unload

This is supposed to be "priv" but we accidentally pass "&priv" which is an address in the stack and so it will lead to memory corruption when the imx_sc_key_action() function is called. Remove the &.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 768062fd1284529212daffd360314e9aa93abb62, < 3e96803b169dc948847f0fc2bae729a80914eb7b; >= 768062fd1284529212daffd360314e9aa93abb62, < 4ce5218b101205b3425099fe3df88a61b58f9cc2; >= 768062fd1284529212daffd360314e9aa93abb62, < a155292c3ce722036014da5477ee0e4c87b5e6b3; >= 768062fd1284529212daffd360314e9aa93abb62, < ca9a08de9b294422376f47ade323d69590dbc6f2; >= 768062fd1284529212daffd360314e9aa93abb62, < 56881294915a6e866d31a46f9bcb5e19167cfbaa; >= 768062fd1284529212daffd360314e9aa93abb62, < 6524a15d33951b18ac408ebbcb9c16e14e21c336; >= 768062fd1284529212daffd360314e9aa93abb62, < d83f1512758f4ef6fc5e83219fe7eeeb6b428ea4
LinuxLinux5.8
SiemensRUGGEDCOM RST2428P< V4.0

References

Timeline

Published
Dec 4, 2025
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-40263In the Linux kernel, the following vulnerability has been resolved: Input: cros_ec_keyb - fix an invalid memory access If cros_ec_keyb_regCVE-2025-40264In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is cCVE-2025-40265In the Linux kernel, the following vulnerability has been resolved: vfat: fix missing sb_min_blocksize() return value checks When emulatinCVE-2025-402668.2In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify theCVE-2025-40267In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: ensure allocated iovec gets cleared for early failure A pCVE-2025-40268In the Linux kernel, the following vulnerability has been resolved: cifs: client: fix memory leak in smb3_fs_context_parse_param The user CVE-2025-402697.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCMCVE-2025-40279.8A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown functiCVE-2025-402707.8In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix potential UAF issue for VMA readahead Since commit 78524CVE-2025-402717.8In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is erased from subdir rbtreeCVE-2025-402727.8In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fauCVE-2025-402738.8In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4_free_ol_stateid() Typically copy
CVE-2025-40262: High severity, CVSS 7.8 | Vulnix