CVE-2025-40262: Linux

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: Input: imx_sc_key - fix memory corruption on unload This is supposed to be "priv" but we accidentally pass "&priv" which is an address in the stack and so it will lead to memory corruption when the imx_sc_key_action() function is called. Remove the &.

Affected products

• Linux Linux: from 5.8, before 5.10.247 (fixed in 5.10.247); from 5.11, before 5.15.197 (fixed in 5.15.197); from 5.16, before 6.1.159 (fixed in 6.1.159); from 6.2, before 6.6.118 (fixed in 6.6.118); from 6.7, before 6.12.60 (fixed in 6.12.60); from 6.13, before 6.17.10 (fixed in 6.17.10)
• Siemens Ruggedcom RST2428P: before V4.0 (fixed in V4.0)

Published 2025-12-04. Last modified 2026-07-30.