Wind River Support Network

HomeDefectsLIN1025-5896
Fixed

LIN1025-5896 : Security Advisory - linux - CVE-2025-40160

Created: Nov 12, 2025    Updated: Nov 25, 2025
Resolved Date: Nov 24, 2025
Found In Version: 10.25.33.1
Fix Version: 10.25.33.3
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]xen/events: Return -EEXIST for bound VIRQs[EOL][EOL]Change find_virq() to return -EEXIST when a VIRQ is bound to a[EOL]different CPU than the one passed in.  With that, remove the BUG_ON()[EOL]from bind_virq_to_irq() to propogate the error upwards.[EOL][EOL]Some VIRQs are per-cpu, but others are per-domain or global.  Those must[EOL]be bound to CPU0 and can then migrate elsewhere.  The lookup for[EOL]per-domain and global will probably fail when migrated off CPU 0,[EOL]especially when the current CPU is tracked.  This now returns -EEXIST[EOL]instead of BUG_ON().[EOL][EOL]A second call to bind a per-domain or global VIRQ is not expected, but[EOL]make it non-fatal to avoid trying to look up the irq, since we don't[EOL]know which per_cpu(virq_to_irq) it will be in.

CVEs


Live chat
Online