Threats tagged 'ghsa-vvgj-gr7g-xwww'

CVE-2025-23140 is a vulnerability in the Linux kernel's pci_endpoint_test component where interrupts may remain unreleased after a request_irq error, causing warnings and potential resource leaks. The issue arises because pci_endpoint_test_free_irq_vectors() assumes all IRQs are released, but some remain, leading to non-empty /proc/irq directories and kernel warnings. The fix involves properly releasing remaining IRQs by calling pci_endpoint_test_release_irq() and adjusting the count of remaining IRQs.