CVE-2025-40194: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2025-40194DEBIAN-CVE-2025-40194
Published 12-11-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2025-40194 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.7% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.21%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 46 · Related 44
DLA-4379-1DLA-4404-1OPENSUSE-SU-2025:20172-1SUSE-SU-2025:4393-1SUSE-SU-2025:4422-1SUSE-SU-2025:4505-1

Timeline

  1. 12-11-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() The cpufreq_cpu_put() call in update_qos_request() takes place too early because the latter subsequently calls freq_qos_update_request() that indirectly accesses the policy object in question through the QoS request object passed to it. Fortunately, update_qos_request() is called under intel_pstate_driver_lock, so this issue does not matter for changing the intel_pstate operation mode, but it theoretically can cause a crash to occur on CPU device hot removal (which currently can only happen in virt, but it is formally supported nevertheless). Address this issue by modifying update_qos_request() to drop the reference to the policy later.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

+0.02 pp

From 0.19% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu149 products
  • linuxAll versions (No fix recorded) | < 5.15.0-170.180 | < 6.8.0-106.106 | < 6.17.0-14.14
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1100.107 | < 6.8.0-1050.53 | < 6.17.0-1007.7
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.158-1 | < 6.12.57-1 | < 6.17.6-1
Linux1 product
  • linux≥ da5c504c7aae96db68c4b38e2564a88e91842d89, < 15ac9579ebdaf22a37d7f60b3a8efc1029732ef9 | ≥ da5c504c7aae96db68c4b38e2564a88e91842d89, < bc26564bcc659beb6d977cd6eb394041ec2f2851 | ≥ da5c504c7aae96db68c4b38e2564a88e91842d89, < ad4e8f9bdbef11a19b7cb93e7f313bf59bdcc3b4 | ≥ da5c504c7aae96db68c4b38e2564a88e91842d89, < 0a58d3e77b22b087a57831c87cafd360e144a5bd | ≥ da5c504c7aae96db68c4b38e2564a88e91842d89, < 69a18ff6c60e8e113420f15355fad862cb45d38e | ≥ da5c504c7aae96db68c4b38e2564a88e91842d89, < ba63d4e9857a72a89e71a4eff9f2cc8c283e94c3 | ≥ da5c504c7aae96db68c4b38e2564a88e91842d89, < 57e4a6aadf12578b96a038373cffd54b3a58b092 | ≥ da5c504c7aae96db68c4b38e2564a88e91842d89, < 69e5d50fcf4093fb3f9f41c4f931f12c2ca8c467 | 5.4

3 vendors · 151 products

References

42 links
Show all 42 references