CVE-2025-40262

Linux Kernel 5.8.0-6.17.9 Memory Corruption via imx_sc_key Action Function

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: Input: imx_sc_key - fix memory corruption on unload This is supposed to be "priv" but we accidentally pass "&priv" which is an address in the stack and so it will lead to memory corruption when the imx_sc_key_action() function is called. Remove the &.

References (7)

Core 7

Scores

EPSS 0.0006
EPSS Percentile 18.3%

Details

Status published
Products (22)
linux/Kernel 5.11.0 - 5.15.197linux
linux/Kernel 5.16.0 - 6.1.159linux
linux/Kernel 5.8.0 - 5.10.247linux
linux/Kernel 6.13.0 - 6.17.10linux
linux/Kernel 6.2.0 - 6.6.118linux
linux/Kernel 6.7.0 - 6.12.60linux
Linux/Linux < 5.8
Linux/Linux 5.10.247 - 5.10.*
Linux/Linux 5.15.197 - 5.15.*
Linux/Linux 5.8
... and 12 more
Published Dec 04, 2025
Tracked Since Feb 18, 2026