Vulnerability details
CVE-2025-40202
Linux Linux
ipmi: Rework user message limit handling
CVSS 3.1
7.8High
Official description
In the Linux kernel, the following vulnerability has been resolved: ipmi: Rework user message limit handling The limit on the number of user messages had a number of issues, improper counting in some cases and a use after free. Restructure how this is all done to handle more in the receive message allocation routine, so all refcouting and user message limit counts are done in that routine. It's a lot cleaner and safer.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.8High | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 5.19 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 8e76741c3d8b20dfa2d6c30fa10ff927cfd93d82 ≤ v < f63723ca7d7623f9dae1990973cd158671f03c56 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 8e76741c3d8b20dfa2d6c30fa10ff927cfd93d82 ≤ v < 348121b29594d42d1635648fd3ed31dfa25351d5 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 8e76741c3d8b20dfa2d6c30fa10ff927cfd93d82 ≤ v < 53d6e403affbf6df2c859a0ea00ccfc1e72090ca | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 8e76741c3d8b20dfa2d6c30fa10ff927cfd93d82 ≤ v < 0ed73be9a2547ffb9b5c1d879ad9bfab73d920b5 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 8e76741c3d8b20dfa2d6c30fa10ff927cfd93d82 ≤ v < b52da4054ee0bf9ecb44996f2c83236ff50b3812 | CVEProject cvelistV5 (CNA) |
References and advisories
5- https://git.kernel.org/stable/c/f63723ca7d7623f9dae1990973cd158671f03c56
- https://git.kernel.org/stable/c/348121b29594d42d1635648fd3ed31dfa25351d5
- https://git.kernel.org/stable/c/53d6e403affbf6df2c859a0ea00ccfc1e72090ca
- https://git.kernel.org/stable/c/0ed73be9a2547ffb9b5c1d879ad9bfab73d920b5
- https://git.kernel.org/stable/c/b52da4054ee0bf9ecb44996f2c83236ff50b3812
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-11-13
- Last updated
- 2026-08-05
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.14%
Probability of exploitation in 30 days
4%
Percentile (among all CVEs)
Weaknesses (CWE)
- —