Linux Kernel Vulnerability in IPMI Messaging Handling by Linux Foundation

CVE-2025-40202

What is CVE-2025-40202?

A vulnerability within the Linux kernel's IPMI implementation relates to the handling of user message limits. This flaw involved improper counting of user messages and a potential use-after-free condition. As a result, the system could become unstable or expose sensitive information. The recent restructuring of the message allocation routine aims to enhance the safety and clarity of this process, ensuring accurate reference counting and message limit enforcement.

References