Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2025-40185: Linux kernel builds may crash when network adapter allocation fails
CVE-2025-40185 · published 11 months ago
Summary
The network driver in certain Linux kernel packages (Debian and Canonical releases) can leave a reserved slot uncleared if creating a new adapter fails. This can cause later attempts to use the same slot to fail and potentially lead to a system crash. Install the latest kernel updates for the affected packages to apply the fix.
What to do
- Update debian rootio-linux to version 6.12.63-1.root.io.64.
- Update debian rootio-linux to version 6.12.96-1.root.io.153.
- Update canonical linux-aws-6.17 to version 6.17.0-1007.7~24.04.1.
- Update canonical linux-gcp-6.17 to version 6.17.0-1008.8~24.04.1.
- Update canonical linux-nvidia-6.17 to version 6.17.0-1008.8.
- Update canonical linux-oem-6.17 to version 6.17.0-1011.11.
- Update canonical linux-oracle-6.17 to version 6.17.0-1007.7~24.04.1.
- Update canonical linux-realtime-6.17 to version 6.17.0-1006.7~24.04.1.
- Update canonical linux to version 6.17.0-14.14.
- Update canonical linux-aws to version 6.17.0-1007.7.
- Update canonical linux-azure to version 6.17.0-1008.8.
- Update canonical linux-gcp to version 6.17.0-1007.7.
- Update canonical linux-oracle to version 6.17.0-1007.7.
- Update canonical linux-raspi to version 6.17.0-1008.8.
- Update canonical linux-realtime to version 6.17.0-1006.7.
- Update canonical linux-riscv to version 6.17.0-14.14.1.
- Update debian rootio-linux to version 6.12.74-2.root.io.98.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update debian linux to version 6.12.57-1.
- Update debian linux to version 6.17.6-1.
- Update linux kernel to version 6.17.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.63-1.root.io.64 < 6.12.96-1.root.io.153 < 6.12.74-2.root.io.98 Fix: upgrade to 6.12.63-1.root.io.64
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
Showing 50 of 115. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 |
< 6.17.0-1007.7~24.04.1 Fix: upgrade to 6.17.0-1007.7~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 |
< 6.17.0-1008.8~24.04.1 Fix: upgrade to 6.17.0-1008.8~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 |
< 6.17.0-1011.11 Fix: upgrade to 6.17.0-1011.11
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 |
< 6.17.0-1007.7~24.04.1 Fix: upgrade to 6.17.0-1007.7~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 |
< 6.17.0-1006.7~24.04.1 Fix: upgrade to 6.17.0-1006.7~24.04.1
|
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-14.14 Fix: upgrade to 6.17.0-14.14
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-azure |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1006.7 Fix: upgrade to 6.17.0-1006.7
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-14.14.1 Fix: upgrade to 6.17.0-14.14.1
|
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Debian:13 | debian | linux |
< 6.12.57-1 Fix: upgrade to 6.12.57-1
|
| Debian:14 | debian | linux |
< 6.17.6-1 Fix: upgrade to 6.17.6-1
|
| Linux | linux | kernel |
>= 6.13.0, < 6.17.4 Fix: upgrade to 6.17.4
|
Original advisory text
ice: ice_adapter: release xa entry on adapter allocation failure
In the Linux kernel, the following vulnerability has been resolved:
ice: ice_adapter: release xa entry on adapter allocation failure
When ice_adapter_new() fails, the reserved XArray entry created by
xa_insert() is not released. This causes subsequent insertions at
the same index to return -EBUSY, potentially leading to
NULL pointer dereferences.
Reorder the operations as suggested by Przemek Kitszel:
1. Check if adapter already exists (xa_load)
2. Reserve the XArray slot (xa_reserve)
3. Allocate the adapter (ice_adapter_new)
4. Store the adapter (xa_store)
ice: ice_adapter: release xa entry on adapter allocation failure
When ice_adapter_new() fails, the reserved XArray entry created by
xa_insert() is not released. This causes subsequent insertions at
the same index to return -EBUSY, potentially leading to
NULL pointer dereferences.
Reorder the operations as suggested by Przemek Kitszel:
1. Check if adapter already exists (xa_load)
2. Reserve the XArray slot (xa_reserve)
3. Allocate the adapter (ice_adapter_new)
4. Store the adapter (xa_store)
References
- https://ubuntu.com/security/CVE-2025-40185 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-40185 Third Party Advisory
- https://git.kernel.org/linus/2db687f3469dbc5c59bc53d55acafd75d530b497 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8029-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8030-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8029-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8048-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8029-3 Vendor Advisory
- https://git.kernel.org/stable/c/2db687f3469dbc5c59bc53d55acafd75d530b497 URL
- https://git.kernel.org/stable/c/794abb265de3e792167fe3ea0440c064c722bb84 URL
- https://git.kernel.org/stable/c/7b9269de9815fc34d93dab90bd5169bacbe78e70 URL
- https://security-tracker.debian.org/tracker/CVE-2025-40185 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40185... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-40185 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Timeline
Published12 Nov 2025
Updated29 Oct 2026
First seen6 Mar 2026
Sources
CVE-2025-40185 · NVD
UBUNTU-CVE-2025-40185 · OSV
DEBIAN-CVE-2025-40185 · OSV
CVE-2025-40185 · OSV
Track software like this
Free during beta