CVE-2025-40192

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnected" This reverts commit c608966f3f9c2dca596967501d00753282b395fc. This patch has a subtle bug that can cause the IPMI driver to go into an infinite loop if the BMC misbehaves in a certain way. Apparently certain BMCs do misbehave this way because several reports have come in recently about this.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Deferred

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2025-11-12 22:15:46.193000

Last modified

2026-10-19 21:10:00.160000

View original CVE JSON

{
  "id": "CVE-2025-40192",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2025-11-12T22:15:46.193",
  "lastModified": "2026-10-19T21:10:00.160",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"ipmi: fix msg stack when IPMI is disconnected\"\n\nThis reverts commit c608966f3f9c2dca596967501d00753282b395fc.\n\nThis patch has a subtle bug that can cause the IPMI driver to go into an\ninfinite loop if the BMC misbehaves in a certain way.  Apparently\ncertain BMCs do misbehave this way because several reports have come in\nrecently about this."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nRevertir “ipmi: corregir la pila de mensajes cuando IPMI está desconectado”\n\nEsto revierte el commit c608966f3f9c2dca596967501d00753282b395fc.\n\nEste parche tiene un error sutil que puede causar que el controlador IPMI entre en un bucle infinito si el BMC se comporta de manera incorrecta de cierta forma. Aparentemente, ciertos BMCs sí se comportan de esta manera incorrecta, ya que se han recibido varios informes recientemente al respecto."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/char/ipmi/ipmi_kcs_sm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "c608966f3f9c2dca596967501d00753282b395fc",
              "lessThan": "f4aab940ae9eb3ba32e5332b35703673f00d7f37",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "c608966f3f9c2dca596967501d00753282b395fc",
              "lessThan": "b9cc7155e65f6feca51bfedd543b9bd300e2be2b",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "c608966f3f9c2dca596967501d00753282b395fc",
              "lessThan": "8cf5c24533b8058910fcb83a25a9cf0306383780",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "c608966f3f9c2dca596967501d00753282b395fc",
              "lessThan": "5d09ee1bec870263f4ace439402ea840503b503b",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/char/ipmi/ipmi_kcs_sm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.2",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.2",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.113",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.54",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.17.4",
              "lessThanOrEqual": "6.17.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/5d09ee1bec870263f4ace439402ea840503b503b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8cf5c24533b8058910fcb83a25a9cf0306383780",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b9cc7155e65f6feca51bfedd543b9bd300e2be2b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f4aab940ae9eb3ba32e5332b35703673f00d7f37",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}