CVE-2025-23140

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2025
Last modified:
05/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error<br /> <br /> After devm_request_irq() fails with error in pci_endpoint_test_request_irq(),<br /> the pci_endpoint_test_free_irq_vectors() is called assuming that all IRQs<br /> have been released.<br /> <br /> However, some requested IRQs remain unreleased, so there are still<br /> /proc/irq/* entries remaining, and this results in WARN() with the<br /> following message:<br /> <br /> remove_proc_entry: removing non-empty directory &amp;#39;irq/30&amp;#39;, leaking at least &amp;#39;pci-endpoint-test.0&amp;#39;<br /> WARNING: CPU: 0 PID: 202 at fs/proc/generic.c:719 remove_proc_entry +0x190/0x19c<br /> <br /> To solve this issue, set the number of remaining IRQs to test-&gt;num_irqs,<br /> and release IRQs in advance by calling pci_endpoint_test_release_irq().<br /> <br /> [kwilczynski: commit log]

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.19 (including) 5.4.293 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.237 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.181 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.135 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.88 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.25 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.14.3 (excluding)
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*