CVE-2025-40156: linux
Vulnerability summary
CVE-2025-40156 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 31 · Related 30Timeline
- 12-11-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() The drv->sram_reg pointer could be set to ERR_PTR(-EPROBE_DEFER) which would lead to a error pointer dereference. Use IS_ERR_OR_NULL() to check that the pointer is valid.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
+0.01 pp
From 0.19% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu127 products
- linux< 6.8.0-106.106 | < 6.17.0-14.14
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1050.53 | < 6.17.0-1007.7
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.158-1 | < 6.12.57-1 | < 6.17.6-1
Linux1 product
- linux≥ e09bd5757b5227d6804b30c58d4587f7f87d1afa, < 9cc23e221f392304b7b8aad213812564ddf6517e | ≥ e09bd5757b5227d6804b30c58d4587f7f87d1afa, < 80eab6a9df7e1107dc334434dbacd05297703377 | ≥ e09bd5757b5227d6804b30c58d4587f7f87d1afa, < 44e32104cf7e670e3d683c97b52350d8fac23322 | ≥ e09bd5757b5227d6804b30c58d4587f7f87d1afa, < 24d61b6e23d2c7291c528dd43a0bf76b5c05c8f0 | ≥ e09bd5757b5227d6804b30c58d4587f7f87d1afa, < fc33bf0e097c6834646b98a7b3da0ae5b617f0f9 | 6.1
3 vendors · 129 products
