VulnerabilityPublished 28 Oct 2025Updated 10 Nov 2026

CVE-2025-40070: Linux kernel · pps: fix warning in pps_register_cdev when register device fail

Affects Linux kernelSource CVE Database V5

Compare

Not known to be exploited · fixed in f01fa3588e0b3cb1540f56d2c6bd99e5b3810234 : update Linux kernel when convenient.

Data as of 10 Nov 2026, 15:03 UTC

Severity

Low

Rated Low by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none

Patch: Available – fixed in f01fa3588e0b3cb1540f56d2c6bd99e5b3810234, cf71834a0cfc394c72d62fd6dbb470ee13cf8f5e, b0531cdba5029f897da5156815e3bdafe1e9b88d +12

Exploitation evidence

Disclosed: evidence found.
CVE published 28 Oct 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponized: A Metasploit exploit module or Exploit-DB entry exists (Metasploit scanner modules do not count), or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected >=5.4.291 <5.4.301 >=5.10.235 <5.10.246 >=5.15.179 <5.15.195 >=6.1.129 <6.1.156 >=6.6.76 <6.6.112 >=6.12.13 <6.12.53 >=6.13.2 <6.14	Fixed in f01fa3588e0b3cb1540f56d2c6bd99e5b3810234 cf71834a0cfc394c72d62fd6dbb470ee13cf8f5e b0531cdba5029f897da5156815e3bdafe1e9b88d 125527db41805693208ee1aacd7f3ffe6a3a489c 38c7bb10aae5118dd48fa7a82f7bf93839bcc320 6.14 6.12.53 6.6.112 6.1.156 5.15.195 5.10.246 5.4.301 4cbd7450a22c5ee4842fc4175ad06c0c82ea53a8 2a194707ca27a3b0523023fa8b446e5ec922dc51 0f97564a1fb62f34b3b498e2f12caffbe99c004a
LinuxLinux	Affected =6.14	Fixed in–

AI-suggested

This vulnerability has been fixed in multiple Linux kernel versions, including 5.15.195, 6.1.156, 6.6.112, 6.12.53, and 6.14. Users and administrators should upgrade to these or later versions to resolve the issue. No additional mitigation steps are required beyond applying the official patches.

Description

A vulnerability in the Linux kernel's pps subsystem caused warnings due to improper error handling in the pps_register_cdev function when device registration fails. The issue arises because the release hook was not set before calling device_register(), leading to a warning during device release cleanup. This has been fixed by ensuring the release hook is set prior to device registration and removing outdated comments and potential double free scenarios.

Impact

The vulnerability causes kernel warnings due to improper error handling during device registration failure in the pps subsystem. While it does not indicate direct exploitation or security compromise, such warnings can lead to instability or unexpected kernel behavior. There is no evidence of exploitation in the wild or direct security impact beyond the warning and potential resource management issues.

Summary

CVE-2025-40070 addresses a flaw in the Linux kernel's pps_register_cdev function where the release hook was not set before device_register() was called. If device_register() failed, put_device() would invoke the release function, causing a kernel warning. The fix involves setting the release hook before device registration to prevent this warning. Additionally, outdated comments were removed and a double free risk was mitigated by removing 'kfree_pps' in pps_register_source(). This vulnerability affects multiple Linux kernel versions and has been resolved in several fixed commits and versions.

References

Community reviews

Loading reviews…

Exploitation evidence

What to do

Affected software

Description

AI analysisMachine-generated, updated 10 Nov 2026, 15:03 UTC

Technical details

References

Community reviews

Related threats