CVE-2025-40062: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs When the initialization of qm->debug.acc_diff_reg fails, the probe process does not exit. However, after qm->debug.qm_diff_regs is freed, it is not set to NULL. This can lead to a double free when the remove process attempts to free it again. Therefore, qm->debug.qm_diff_regs should be set to NULL after it is freed.

Affected products

• Linux Linux: from 6.1.98, before 6.1.156 (fixed in 6.1.156); from 6.6.39, before 6.6.112 (fixed in 6.6.112); from 6.9.9, before 6.10 (fixed in 6.10); from 6.10, before 6.12.53 (fixed in 6.12.53); from 6.13, before 6.17.3 (fixed in 6.17.3)

Published 2025-10-28. Last modified 2026-06-17.