Linux Kernel Vulnerability in Hisilicon QM Debugging Functionality

CVE-2025-40062

What is CVE-2025-40062?

A vulnerability in the Linux kernel affects the Hisilicon QM crypto subsystem due to improper handling of memory after a debug initialization failure. Specifically, when the qm->debug.acc_diff_reg initialization does not succeed, the probe process fails to exit. This leads to a scenario where qm->debug.qm_diff_regs, after being freed, is not set to NULL. Consequently, this oversight can result in a double free error during the removal process, posing risks to system stability and security. Proper handling of memory pointers during initialization and removal phases is crucial to mitigate potential exploitation.

References