CVE-2025-40226

Dec. 4, 2025, 5:15 p.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Account for failed debug initialization When the SCMI debug subsystem fails to initialize, the related debug root will be missing, and the underlying descriptor will be NULL. Handle this fault condition in the SCMI debug helpers that maintain metrics counters.

Product(s) Impacted

Product Versions
linux_kernel
  • *
arm_scmi
  • *

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/2290ab43b9d8eafb8046387f10a8dfa2b030ba46
https://git.kernel.org/stable/c/554c9d5c6c695aedaecfb4365c187102709397b0
https://git.kernel.org/stable/c/d719ce9f286c439795cd2beee4c91f12b84bc5a0
https://git.kernel.org/stable/c/e088efcd97cb7c7297d166bb52c3b87a29f6a0b1

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2025-12-04
CVE-2025-40226

Timeline

Published: Dec. 4, 2025, 4:16 p.m.
Last Modified: Dec. 4, 2025, 5:15 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.