Vulnerability in Linux

CVE-2025-40226

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Account for failed debug initialization When the SCMI debug subsystem fails to initialize, the related debug root will be missing, and the underlying descriptor will be NULL. Handle this fault condition in the SCMI debug helpers that maintain metrics counters.

EPSS: 0.002 (7.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 6.17.6, 6.12, b38812942556819263256cb77fbdc9eae7aa5b1b

References