CVE-2025-40352

CVE-2025-40352

published December 16, 2025

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init

The lock-related debug logic (CONFIG_LOCK_STAT) in the kernel is noting

the following warning when the BlueField-3 SOC is booted:

BUG: key ffff00008a3402a8 has not been registered!

------------[ cut here ]------------

DEBUG_LOCKS_WARN_ON(1)

WARNING: CPU: 4 PID: 592 at kernel/locking/lockdep.c:4801 lockdep_init_map_type+0x1d4/0x2a0

<snip>

Call trace:

lockdep_init_map_type+0x1d4/0x2a0

__kernfs_create_file+0x84/0x140

sysfs_add_file_mode_ns+0xcc/0x1cc

internal_create_group+0x110/0x3d4

internal_create_groups.part.0+0x54/0xcc

sysfs_create_groups+0x24/0x40

device_add+0x6e8/0x93c

device_register+0x28/0x40

__hwmon_device_register+0x4b0/0x8a0

devm_hwmon_device_register_with_groups+0x7c/0xe0

mlxbf_pmc_probe+0x1e8/0x3e0 [mlxbf_pmc]

platform_probe+0x70/0x110

The mlxbf_pmc driver must call sysfs_attr_init() during the

initialization of the "count_clock" data structure to avoid

this warning.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00207 · 10.2th percentile
Published
2025-12-16T19:15Z
References (2)
EPSS history
Timeline
  • 16 DEC 13:30Z
    platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init
    cvelistv5