{
  "cveId": "CVE-2025-40023",
  "url": "https://patchblox.com/security/cve/CVE-2025-40023",
  "summary": "CVE-2025-40023 is fixed in linux on 1 platform by DEBIAN-CVE-2025-40023 (version 6.16.10-1), released October 24, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/vf: Don\u0027t expose sysfs attributes not app...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/xe/vf: Don\u0027t expose sysfs attributes not applicable for VFs  VFs can\u0027t read BMG_PCIE_CAP(0x138340) register nor access PCODE (already guarded by the info.skip_pcode flag) so we shouldn\u0027t expose attributes that require any of them to avoid errors like:   [] xe 0000:03:00.1: [drm] Tile0: GT0: VF is trying to read an \\                      inaccessible register 0x138340\u002B0x0  [] RIP: 0010:xe_gt_sriov_vf_read32\u002B0x6c2/0x9a0 [xe]  [] Call Trace:  []  xe_mmio_read32\u002B0x110/0x280 [xe]  []  auto_link_downgrade_capable_show\u002B0x2e/0x70 [xe]  []  dev_attr_show\u002B0x1a/0x70  []  sysfs_kf_seq_show\u002B0xaa/0x120  []  kernfs_seq_show\u002B0x41/0x60  (cherry picked from commit a2d6223d224f333f705ed8495bf8bebfbc585c35)",
  "published": "2025-10-24T13:15:47Z",
  "severity": "",
  "epss": 0.00184,
  "epssPercentile": 0.08082,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.16.10-1",
      "fix": "DEBIAN-CVE-2025-40023",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40023",
      "released": "2025-10-24T13:15:47Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}