Linux Kernel Vulnerability in Hisilicon QM Affecting Virtual Functions

CVE-2025-40136

What is CVE-2025-40136?

A vulnerability has been identified in the Linux kernel concerning the Hisilicon QM driver, where a reserved interrupt intended for virtual functions was not properly registered. This oversight results in the driver allocating interrupt vectors inappropriately, particularly under configurations utilizing GICv4 and virtual function passthrough. When the system attempts to release the interrupt, it triggers a warning, which may lead to operational inconsistencies. To mitigate this issue, the reserved interrupt should be registered for virtual functions, and the IRQF_NO_AUTOEN flag should be applied to prevent this warning from occurring.

References