CVE-2025-40197

Linux Kernel Use-After-Free in Media Controller Device Minor Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released.

References (8)

Core 8

Scores

EPSS 0.0019
EPSS Percentile 9.1%

Details

Status published
Products (30)
linux/Kernel < 5.4.301linux
linux/Kernel 5.11.0 - 5.15.195linux
linux/Kernel 5.16.0 - 6.1.157linux
linux/Kernel 5.5.0 - 5.10.246linux
linux/Kernel 6.13.0 - 6.17.4linux
linux/Kernel 6.2.0 - 6.6.113linux
linux/Kernel 6.7.0 - 6.12.54linux
Linux/Linux < 5.10.246
Linux/Linux < 5.15.195
Linux/Linux < 5.4.301
... and 20 more
Published Nov 12, 2025
Tracked Since Feb 18, 2026