CVE-2025-40226

CVE-2025-40226

published December 4, 2025

CVSS
—
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Account for failed debug initialization

When the SCMI debug subsystem fails to initialize, the related debug root

will be missing, and the underlying descriptor will be NULL.

Handle this fault condition in the SCMI debug helpers that maintain

metrics counters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Published
2025-12-04T21:16Z
References (4)
https://git.kernel.org/stable/c/2290ab43b9d8eafb8046387f10a8dfa2b030ba46 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/554c9d5c6c695aedaecfb4365c187102709397b0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d719ce9f286c439795cd2beee4c91f12b84bc5a0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e088efcd97cb7c7297d166bb52c3b87a29f6a0b1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 04 DEC 15:31Z
    firmware: arm_scmi: Account for failed debug initialization
    cvelistv5