CVE-2025-40202
High
Description
In the Linux kernel, the following vulnerability has been resolved: ipmi: Rework user message limit handling The limit on the number of user messages had a number of issues, improper counting in some cases and a use after free. Restructure how this is all done to handle more in the receive message allocation routine, so all refcouting and user message limit counts are done in that routine. It's a lot cleaner and safer.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linuxf63723ca7d7623f9dae1990973cd158671f03c56, 348121b29594d42d1635648fd3ed31dfa25351d5, 53d6e403affbf6df2c859a0ea00ccfc1e72090ca, 0ed73be9a2547ffb9b5c1d879ad9bfab73d920b5, b52da4054ee0bf9ecb44996f2c83236ff50b3812 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8e76741c3d8b20dfa2d6c30fa10ff927cfd93d82 ≤ v < f63723ca7d7623f9dae1990973cd158671f03c56, 8e76741c3d8b20dfa2d6c30fa10ff927cfd93d82 ≤ v < 348121b29594d42d1635648fd3ed31dfa25351d5, 8e76741c3d8b20dfa2d6c30fa10ff927cfd93d82 ≤ v < 53d6e403affbf6df2c859a0ea00ccfc1e72090ca, 8e76741c3d8b20dfa2d6c30fa10ff927cfd93d82 ≤ v < 0ed73be9a2547ffb9b5c1d879ad9bfab73d920b5, 8e76741c3d8b20dfa2d6c30fa10ff927cfd93d82 ≤ v < b52da4054ee0bf9ecb44996f2c83236ff50b3812, 5.19 | f63723ca7d7623f9dae1990973cd158671f03c56, 348121b29594d42d1635648fd3ed31dfa25351d5, 53d6e403affbf6df2c859a0ea00ccfc1e72090ca, 0ed73be9a2547ffb9b5c1d879ad9bfab73d920b5, b52da4054ee0bf9ecb44996f2c83236ff50b3812 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.