Vulnerability in Linux Kernel Affects PPS Device Registration

CVE-2025-40070

What is CVE-2025-40070?

A vulnerability exists in the Linux kernel that impacts the proper registration of PPS devices. When the function pps_register_cdev attempts to register a device, it must correctly set the release hook prior to invoking device_register(). Failure to do so can lead to a warning during device operations, particularly if the registration fails, causing a potential use-after-free condition in the system. This oversight may compromise the integrity of device management within the kernel, emphasizing the need for proper error handling mechanisms to avoid risking system stability.

References