CVE-2025-40062

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs When the initialization of qm->debug.acc_diff_reg fails, the probe process does not exit. However, after qm->debug.qm_diff_regs is freed, it is not set to NULL. This can lead to a double free when the remove process attempts to free it again. Therefore, qm->debug.qm_diff_regs should be set to NULL after it is freed.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 28, 2025
First seenOct 28, 2025

How to fix

Update
  • Linux Linuxa7836260d5121949ba734e840d42a86ab4a32fcc, 1750f1ec143ebabdbdfa013668665c9d5042c430, a87a21a56244b8f4eb357f6bad879247005bbe38, 7226a0650ad5705bd8d39a11be270fa21ed1e6a5, f0cafb02de883b3b413d34eb079c9680782a9cc1, 6.1.156, 6.6.112, 6.10 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxeda60520cfe3aba9f088c68ebd5bcbca9fc6ac3c ≤ v < a7836260d5121949ba734e840d42a86ab4a32fcc, 7fc8d9a525b5c3f8dfa5ed50901e764d8ede7e1e ≤ v < 1750f1ec143ebabdbdfa013668665c9d5042c430, 8be0913389718e8d27c4f1d4537b5e1b99ed7739 ≤ v < a87a21a56244b8f4eb357f6bad879247005bbe38, 8be0913389718e8d27c4f1d4537b5e1b99ed7739 ≤ v < 7226a0650ad5705bd8d39a11be270fa21ed1e6a5, 8be0913389718e8d27c4f1d4537b5e1b99ed7739 ≤ v < f0cafb02de883b3b413d34eb079c9680782a9cc1, e0a2d2df9ba7bd6bd7e0a9b6a5e3894f7e8445b3, 6.1.98 ≤ v < 6.1.156, 6.6.39 ≤ v < 6.6.112, 6.9.9 ≤ v < 6.10, 6.10a7836260d5121949ba734e840d42a86ab4a32fcc, 1750f1ec143ebabdbdfa013668665c9d5042c430, a87a21a56244b8f4eb357f6bad879247005bbe38, 7226a0650ad5705bd8d39a11be270fa21ed1e6a5, f0cafb02de883b3b413d34eb079c9680782a9cc1, 6.1.156, 6.6.112, 6.10

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.