CVE-2025-40221

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: media: pci: mg4b: fix uninitialized iio scan data Fix potential leak of uninitialized stack data to userspace by ensuring that the `scan` structure is zeroed before use.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedDec 4, 2025
First seenDec 4, 2025

How to fix

Update
  • Linux Linuxb7f82da7f86479cb6479a76ebe213ece7c77398f, b792eba44494b4e6ab5006013335f9819f303b8b, c0d3f6969bb4d72476cfe7ea9263831f1c283704 or later

Affected products

ProductAffected versionsFixed in
Linux Linux0ab13674a9bd10514486cf1670d71dbd8afec421 ≤ v < b7f82da7f86479cb6479a76ebe213ece7c77398f, 0ab13674a9bd10514486cf1670d71dbd8afec421 ≤ v < b792eba44494b4e6ab5006013335f9819f303b8b, 0ab13674a9bd10514486cf1670d71dbd8afec421 ≤ v < c0d3f6969bb4d72476cfe7ea9263831f1c283704, 6.7b7f82da7f86479cb6479a76ebe213ece7c77398f, b792eba44494b4e6ab5006013335f9819f303b8b, c0d3f6969bb4d72476cfe7ea9263831f1c283704

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.