CVE-2025-40062
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs When the initialization of qm->debug.acc_diff_reg fails, the probe process does not exit. However, after qm->debug.qm_diff_regs is freed, it is not set to NULL. This can lead to a double free when the remove process attempts to free it again. Therefore, qm->debug.qm_diff_regs should be set to NULL after it is freed.
How to fix
- Linux Linuxa7836260d5121949ba734e840d42a86ab4a32fcc, 1750f1ec143ebabdbdfa013668665c9d5042c430, a87a21a56244b8f4eb357f6bad879247005bbe38, 7226a0650ad5705bd8d39a11be270fa21ed1e6a5, f0cafb02de883b3b413d34eb079c9680782a9cc1, 6.1.156, 6.6.112, 6.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | eda60520cfe3aba9f088c68ebd5bcbca9fc6ac3c ≤ v < a7836260d5121949ba734e840d42a86ab4a32fcc, 7fc8d9a525b5c3f8dfa5ed50901e764d8ede7e1e ≤ v < 1750f1ec143ebabdbdfa013668665c9d5042c430, 8be0913389718e8d27c4f1d4537b5e1b99ed7739 ≤ v < a87a21a56244b8f4eb357f6bad879247005bbe38, 8be0913389718e8d27c4f1d4537b5e1b99ed7739 ≤ v < 7226a0650ad5705bd8d39a11be270fa21ed1e6a5, 8be0913389718e8d27c4f1d4537b5e1b99ed7739 ≤ v < f0cafb02de883b3b413d34eb079c9680782a9cc1, e0a2d2df9ba7bd6bd7e0a9b6a5e3894f7e8445b3, 6.1.98 ≤ v < 6.1.156, 6.6.39 ≤ v < 6.6.112, 6.9.9 ≤ v < 6.10, 6.10 | a7836260d5121949ba734e840d42a86ab4a32fcc, 1750f1ec143ebabdbdfa013668665c9d5042c430, a87a21a56244b8f4eb357f6bad879247005bbe38, 7226a0650ad5705bd8d39a11be270fa21ed1e6a5, f0cafb02de883b3b413d34eb079c9680782a9cc1, 6.1.156, 6.6.112, 6.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.