CVE-2025-40177
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/11/2025
Last modified:
12/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
accel/qaic: Fix bootlog initialization ordering<br />
<br />
As soon as we queue MHI buffers to receive the bootlog from the device,<br />
we could be receiving data. Therefore all the resources needed to<br />
process that data need to be setup prior to queuing the buffers.<br />
<br />
We currently initialize some of the resources after queuing the buffers<br />
which creates a race between the probe() and any data that comes back<br />
from the device. If the uninitialized resources are accessed, we could<br />
see page faults.<br />
<br />
Fix the init ordering to close the race.



