CVE-2025-40192

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in a certain way. Apparently certain BMCs do misbehave this way because several reports have come in recently about this.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/5d09ee1bec870263f4ace439402ea840503b503b
https://git.kernel.org/stable/c/8cf5c24533b8058910fcb83a25a9cf0306383780
https://git.kernel.org/stable/c/b9cc7155e65f6feca51bfedd543b9bd300e2be2b
https://git.kernel.org/stable/c/f4aab940ae9eb3ba32e5332b35703673f00d7f37

Configurations

No configuration.

History

No history.

Information

Published : 2025-11-12 22:15

Updated : 2026-06-17 09:21

NVD link : CVE-2025-40192

Mitre link : CVE-2025-40192

CVE.ORG link : CVE-2025-40192

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2025-40192", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c608966f3f9c2dca596967501d00753282b395fc", "lessThan": "f4aab940ae9eb3ba32e5332b35703673f00d7f37", "versionType": "git"}, {"status": "affected", "version": "c608966f3f9c2dca596967501d00753282b395fc", "lessThan": "b9cc7155e65f6feca51bfedd543b9bd300e2be2b", "versionType": "git"}, {"status": "affected", "version": "c608966f3f9c2dca596967501d00753282b395fc", "lessThan": "8cf5c24533b8058910fcb83a25a9cf0306383780", "versionType": "git"}, {"status": "affected", "version": "c608966f3f9c2dca596967501d00753282b395fc", "lessThan": "5d09ee1bec870263f4ace439402ea840503b503b", "versionType": "git"}], "programFiles": ["drivers/char/ipmi/ipmi_kcs_sm.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.2"}, {"status": "unaffected", "version": "0", "lessThan": "6.2", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.113", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.54", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.17.4", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/char/ipmi/ipmi_kcs_sm.c"], "defaultStatus": "affected"}]}], "published": "2025-11-12T22:15:46.193", "references": [{"url": "https://git.kernel.org/stable/c/5d09ee1bec870263f4ace439402ea840503b503b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8cf5c24533b8058910fcb83a25a9cf0306383780", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b9cc7155e65f6feca51bfedd543b9bd300e2be2b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f4aab940ae9eb3ba32e5332b35703673f00d7f37", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"ipmi: fix msg stack when IPMI is disconnected\"\n\nThis reverts commit c608966f3f9c2dca596967501d00753282b395fc.\n\nThis patch has a subtle bug that can cause the IPMI driver to go into an\ninfinite loop if the BMC misbehaves in a certain way. Apparently\ncertain BMCs do misbehave this way because several reports have come in\nrecently about this."}], "lastModified": "2026-06-17T09:21:26.123", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}