CVE-2025-40219: PCI/IOV: Fix race between SR-IOV enable/disable and hotplug

Deferred
AliasesUBUNTU-CVE-2025-40219DEBIAN-CVE-2025-40219
Published 04-12-2025Last modified 15-10-2026

Vulnerability summary

CVE-2025-40219 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 13% of scored vulnerabilities.

Priority
Insufficient evidence

No CVSS vector published; no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.22%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 47 · Related 46
DLA-4404-1OPENSUSE-SU-2026:20145-1SUSE-SU-2026:0278-1SUSE-SU-2026:0281-1SUSE-SU-2026:0293-1SUSE-SU-2026:0315-1

Timeline

  1. 04-12-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Fix race between SR-IOV enable/disable and hotplug Commit 05703271c3cd ("PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV") tried to fix a race between the VF removal inside sriov_del_vfs() and concurrent hot unplug by taking the PCI rescan/remove lock in sriov_del_vfs(). Similarly the PCI rescan/remove lock was also taken in sriov_add_vfs() to protect addition of VFs. This approach however causes deadlock on trying to remove PFs with SR-IOV enabled because PFs disable SR-IOV during removal and this removal happens under the PCI rescan/remove lock. So the original fix had to be reverted. Instead of taking the PCI rescan/remove lock in sriov_add_vfs() and sriov_del_vfs(), fix the race that occurs with SR-IOV enable and disable vs hotplug higher up in the callchain by taking the lock in sriov_numvfs_store() before calling into the driver's sriov_configure() callback.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.22% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: not stated in public data.

Ubuntu150 products
  • linux< 5.15.0-170.180 | < 6.8.0-106.106 | All versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-134.134 | < 6.17.0-14.14
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1100.107 | < 6.8.0-1050.53 | All versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1060.63 | < 6.17.0-1007.7
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.170-1 | < 6.12.85-1 | < 6.19.6-1
Linux1 product
  • linux≥ 18f9e9d150fccfa747875df6f0a9f606740762b3, < 3cddde484471c602bea04e6f384819d336a1ff84 | ≥ 18f9e9d150fccfa747875df6f0a9f606740762b3, < d7673ac466eca37ec3e6b7cc9ccdb06de3304e9b | ≥ 18f9e9d150fccfa747875df6f0a9f606740762b3, < 7c37920c96b85ef4255a7acc795e99e63dd38d59 | ≥ 18f9e9d150fccfa747875df6f0a9f606740762b3, < 1047ca2d816994f31e1475e63e0c0b7825599747 | ≥ 18f9e9d150fccfa747875df6f0a9f606740762b3, < 97c18f074ff1c12d016a0753072a3afdfa0b9611 | ≥ 18f9e9d150fccfa747875df6f0a9f606740762b3, < bea1d373098b22d7142da48750ce5526096425bc | ≥ 18f9e9d150fccfa747875df6f0a9f606740762b3, < f3015627b6e9ddf85cfeaf42405b3c194dde2c36 | ≥ 18f9e9d150fccfa747875df6f0a9f606740762b3, < a5338e365c4559d7b4d7356116b0eb95b12e08d5 | 5.0

3 vendors · 152 products

References

53 links
Show all 53 references