Memory Corruption in Linux Kernel Affecting IMX_SC_KEY Functionality

CVE-2025-40262

What is CVE-2025-40262?

A vulnerability in the Linux kernel's imx_sc_key function allows for memory corruption due to incorrect use of memory addresses when passing parameters. Specifically, the function improperly passes a stack address instead of the intended private structure, leading to instability and potential exploitation when the imx_sc_key_action() function is executed. Addressing this issue is critical to maintaining system integrity and protecting against possible attacks.

References