CVE-2025-40177
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
12/11/2025
Última modificación:
12/11/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
accel/qaic: Fix bootlog initialization ordering<br />
<br />
As soon as we queue MHI buffers to receive the bootlog from the device,<br />
we could be receiving data. Therefore all the resources needed to<br />
process that data need to be setup prior to queuing the buffers.<br />
<br />
We currently initialize some of the resources after queuing the buffers<br />
which creates a race between the probe() and any data that comes back<br />
from the device. If the uninitialized resources are accessed, we could<br />
see page faults.<br />
<br />
Fix the init ordering to close the race.



