{
  "cveId": "CVE-2025-40091",
  "url": "https://patchblox.com/security/cve/CVE-2025-40091",
  "summary": "CVE-2025-40091 is fixed in 18 products on 1 platform, first by DEBIAN-CVE-2025-40091, released October 30, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ixgbe: fix too early devlink_free() in ixgbe_rem...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ixgbe: fix too early devlink_free() in ixgbe_remove()  Since ixgbe_adapter is embedded in devlink, calling devlink_free() prematurely in the ixgbe_remove() path can lead to UAF. Move devlink_free() to the end.  KASAN report:   BUG: KASAN: use-after-free in ixgbe_reset_interrupt_capability\u002B0x140/0x180 [ixgbe]  Read of size 8 at addr ffff0000adf813e0 by task bash/2095  CPU: 1 UID: 0 PID: 2095 Comm: bash Tainted: G S  6.17.0-rc2-tnguy.net-queue\u002B #1 PREEMPT(full)  [...]  Call trace:   show_stack\u002B0x30/0x90 (C)   dump_stack_lvl\u002B0x9c/0xd0   print_address_description.constprop.0\u002B0x90/0x310   print_report\u002B0x104/0x1f0   kasan_report\u002B0x88/0x180   __asan_report_load8_noabort\u002B0x20/0x30   ixgbe_reset_interrupt_capability\u002B0x140/0x180 [ixgbe]   ixgbe_clear_interrupt_scheme\u002B0xf8/0x130 [ixgbe]   ixgbe_remove\u002B0x2d0/0x8c0 [ixgbe]   pci_device_remove\u002B0xa0/0x220   device_remove\u002B0xb8/0x170   device_release_driver_internal\u002B0x318/0x490   device_driver_detach\u002B0x40/0x68   unbind_store\u002B0xec/0x118   drv_attr_store\u002B0x64/0xb8   sysfs_kf_write\u002B0xcc/0x138   kernfs_fop_write_iter\u002B0x294/0x440   new_sync_write\u002B0x1fc/0x588   vfs_write\u002B0x480/0x6a0   ksys_write\u002B0xf0/0x1e0   __arm64_sys_write\u002B0x70/0xc0   invoke_syscall.constprop.0\u002B0xcc/0x280   el0_svc_common.constprop.0\u002B0xa8/0x248   do_el0_svc\u002B0x44/0x68   el0_svc\u002B0x54/0x160   el0t_64_sync_handler\u002B0xa0/0xe8   el0t_64_sync\u002B0x1b0/0x1b8",
  "published": "2025-10-30T10:15:33Z",
  "severity": "",
  "epss": 0.00184,
  "epssPercentile": 0.08082,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.18.1",
      "fix": "SUSE-SU-2025:4132-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4132-1",
      "released": "2025-11-18T16:45:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1.150700.17.15.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.6.1.160000.2.4",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_6",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.1",
      "fix": "SUSE-SU-2025:4141-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4141-1",
      "released": "2025-11-19T14:06:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP7_Update_6",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.18.1",
      "fix": "SUSE-SU-2025:4132-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4132-1",
      "released": "2025-11-18T16:45:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.20.18.1",
      "fix": "SUSE-SU-2025:4132-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4132-1",
      "released": "2025-11-18T16:45:55Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "OPENSUSE-SU-2025:20091-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20091-1",
      "released": "2025-11-26T17:04:24Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.22.1",
      "fix": "SUSE-SU-2025:4057-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4057-1",
      "released": "2025-11-11T18:36:09Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.7.1",
      "fix": "SUSE-SU-2025:21147-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-21147-1",
      "released": "2025-11-26T15:59:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.17.6-1",
      "fix": "DEBIAN-CVE-2025-40091",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40091",
      "released": "2025-10-30T10:15:33Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}