CVE-2025-40036

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpc_put_args copy_to_user() failure would cause an early return without cleaning up the fdlist, which has been updated by the DSP. This could lead to map leak. Fix this by redirecting to a cleanup path on failure, ensuring that all mapped buffers are properly released before returning.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 28, 2025
First seenOct 28, 2025

How to fix

Update
  • Linux Linuxa085658264d0c8d4f795d4631f77d7289a021de9, 3ad42dc66445df6977cf4be0c06f1a655299ce6c, 78d33a041555db03903e8037fd053ed74fbd88cb, c000f65f0ac93d9f9cc69a230d372f6ca93e4879, da1ba64176e0138f2bfa96f9e43e8c3640d01e1e or later

Affected products

ProductAffected versionsFixed in
Linux Linuxc68cfb718c8f97b7f7a50ed66be5feb42d0c8988 ≤ v < a085658264d0c8d4f795d4631f77d7289a021de9, c68cfb718c8f97b7f7a50ed66be5feb42d0c8988 ≤ v < 3ad42dc66445df6977cf4be0c06f1a655299ce6c, c68cfb718c8f97b7f7a50ed66be5feb42d0c8988 ≤ v < 78d33a041555db03903e8037fd053ed74fbd88cb, c68cfb718c8f97b7f7a50ed66be5feb42d0c8988 ≤ v < c000f65f0ac93d9f9cc69a230d372f6ca93e4879, c68cfb718c8f97b7f7a50ed66be5feb42d0c8988 ≤ v < da1ba64176e0138f2bfa96f9e43e8c3640d01e1e, 5.1a085658264d0c8d4f795d4631f77d7289a021de9, 3ad42dc66445df6977cf4be0c06f1a655299ce6c, 78d33a041555db03903e8037fd053ed74fbd88cb, c000f65f0ac93d9f9cc69a230d372f6ca93e4879, da1ba64176e0138f2bfa96f9e43e8c3640d01e1e

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-40036 · Linux · Dark Radar