CVE-2025-40136

{
  "id": "CVE-2025-40136",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2025-11-12T11:15:43.327",
  "lastModified": "2026-10-30T13:18:13.700",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: hisilicon/qm - request reserved interrupt for virtual function\n\nThe device interrupt vector 3 is an error interrupt for\nphysical function and a reserved interrupt for virtual function.\nHowever, the driver has not registered the reserved interrupt for\nvirtual function. When allocating interrupts, the number of interrupts\nis allocated based on powers of two, which includes this interrupt.\nWhen the system enables GICv4 and the virtual function passthrough\nto the virtual machine, releasing the interrupt in the driver\ntriggers a warning.\n\nThe WARNING report is:\nWARNING: CPU: 62 PID: 14889 at arch/arm64/kvm/vgic/vgic-its.c:852 its_free_ite+0x94/0xb4\n\nTherefore, register a reserved interrupt for VF and set the\nIRQF_NO_AUTOEN flag to avoid that warning."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncripto: hisilicon/qm - solicitar interrupción reservada para función virtual\n\nEl vector de interrupción 3 del dispositivo es una interrupción de error para la función física y una interrupción reservada para la función virtual. Sin embargo, el controlador no ha registrado la interrupción reservada para la función virtual. Al asignar interrupciones, el número de interrupciones se asigna basándose en potencias de dos, lo que incluye esta interrupción. Cuando el sistema habilita GICv4 y el passthrough de función virtual a la máquina virtual, liberar la interrupción en el controlador activa una advertencia.\n\nEl informe de ADVERTENCIA es:\nADVERTENCIA: CPU: 62 PID: 14889 en arch/arm64/kvm/vgic/vgic-its.c:852 its_free_ite+0x94/0xb4\n\nPor lo tanto, registrar una interrupción reservada para VF y establecer la bandera IRQF_NO_AUTOEN para evitar esa advertencia."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/crypto/hisilicon/qm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "3536cc55cadaf2a03241915f9cfdaf6cd073e4fe",
              "lessThan": "e0a82361cef20380b1c0f342c7e92f8ddabeefc2",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "3536cc55cadaf2a03241915f9cfdaf6cd073e4fe",
              "lessThan": "5f75857ed634d04266301d7a4f695a7deeb9bfdc",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "3536cc55cadaf2a03241915f9cfdaf6cd073e4fe",
              "lessThan": "24315474ca913c0693939ab74b389ee04c7d3020",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "3536cc55cadaf2a03241915f9cfdaf6cd073e4fe",
              "lessThan": "854da2b0df1654d63963d587b12fec6068d89643",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "3536cc55cadaf2a03241915f9cfdaf6cd073e4fe",
              "lessThan": "9228facb308157ac0bdd264b873187896f7a9c7a",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/crypto/hisilicon/qm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.1",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.1",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.1.191",
              "lessThanOrEqual": "6.1.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.160",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.114",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.17.3",
              "lessThanOrEqual": "6.17.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/24315474ca913c0693939ab74b389ee04c7d3020",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/5f75857ed634d04266301d7a4f695a7deeb9bfdc",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/854da2b0df1654d63963d587b12fec6068d89643",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/9228facb308157ac0bdd264b873187896f7a9c7a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e0a82361cef20380b1c0f342c7e92f8ddabeefc2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}