CVE-2025-40036

Summary

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: fix possible map leak in fastrpc_put_args

copy_to_user() failure would cause an early return without cleaning up the fdlist, which has been updated by the DSP. This could lead to map leak. Fix this by redirecting to a cleanup path on failure, ensuring that all mapped buffers are properly released before returning.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxc68cfb718c8f97b7f7a50ed66be5feb42d0c8988 < a085658264d0c8d4f795d4631f77d7289a021de9affected
LinuxLinuxc68cfb718c8f97b7f7a50ed66be5feb42d0c8988 < 3ad42dc66445df6977cf4be0c06f1a655299ce6caffected
LinuxLinuxc68cfb718c8f97b7f7a50ed66be5feb42d0c8988 < 78d33a041555db03903e8037fd053ed74fbd88cbaffected
LinuxLinuxc68cfb718c8f97b7f7a50ed66be5feb42d0c8988 < c000f65f0ac93d9f9cc69a230d372f6ca93e4879affected
LinuxLinuxc68cfb718c8f97b7f7a50ed66be5feb42d0c8988 < da1ba64176e0138f2bfa96f9e43e8c3640d01e1eaffected
LinuxLinux5.1affected
LinuxLinux0 < 5.1unaffected
LinuxLinux6.1.156 <= 6.1.*unaffected
LinuxLinux6.6.112 <= 6.6.*unaffected
LinuxLinux6.12.53 <= 6.12.*unaffected
LinuxLinux6.17.3 <= 6.17.*unaffected
LinuxLinux6.18 <= *unaffected

Weaknesses

References