SGI Resource Management Flaw in Linux Kernel Affects IRQ Handling

CVE-2025-40161

What is CVE-2025-40161?

A vulnerability in the Linux kernel's handling of SGI (Short for Software Generated Interrupts) resources has been identified. The issue arises from the driver's incorrect determination of SGI versus SPI (Standard Peripheral Interrupt) interrupts when checking IRQ numbers, especially during dynamic IRQ allocation scenarios. This oversight may lead to improper cleanup of SGI resources during the unbinding process, which can cause system instability and kernel crashes. The resolution includes adding an explicit irq_type field to improve identification of SGI interrupts, ensuring that SGI resources are only cleaned up appropriately.

References