CVE-2025-23140

misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error

MEDIUM
5.5
CVSS Score
Published: May 1, 2025 at 12:55 PM UTC
Updated: June 17, 2026 at 08:52 AM UTC
2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error After devm_request_irq() fails with error in pci_endpoint_test_request_irq(), the pci_endpoint_test_free_irq_vectors() is called assuming that all IRQs have been released. However, some requested IRQs remain unreleased, so there are still /proc/irq/* entries remaining, and this results in WARN() with the following message: remove_proc_entry: removing non-empty directory 'irq/30', leaking at least 'pci-endpoint-test.0' WARNING: CPU: 0 PID: 202 at fs/proc/generic.c:719 remove_proc_entry +0x190/0x19c To solve this issue, set the number of remaining IRQs to test->num_irqs, and release IRQs in advance by calling pci_endpoint_test_release_irq(). [kwilczynski: commit log]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.19 ≤ v < 5.10.2374.19 ≤ v < 5.15.1814.19 ≤ v < 5.4.2934.19 ≤ v < 6.1.1354.19 ≤ v < 6.12.254.19 ≤ v < 6.14.34.19 ≤ v < 6.154.19 ≤ v < 6.6.885.11 ≤ v < 5.15.1815.16 ≤ v < 6.1.1355.5 ≤ v < 5.10.2376.13 ≤ v < 6.14.36.2 ≤ v < 6.6.886.7 ≤ v < 6.12.254.19e03327122e2c8e6ae4565ef5b3d3cbe4364546a1
Vendor states this is fixed in 0557e70e2aeba8647bf5a950820b67cfb86533db (fixed)
Vendor states this is fixed in 54c9f299ad7d7c4be5d271ed12d01a59e95b8907 (fixed)
Vendor states this is fixed in 5a4b7181213268c9b07bef8800905528435db44a (fixed)
Vendor states this is fixed in 705be96504779e4a333ea042b4779ea941f0ace9 (fixed)
Vendor states this is fixed in 770407f6173f4f39f4e2c1b54422b79ce6c98bdb (fixed)
Vendor states this is fixed in 9d5118b107b1a2353ed0dff24404aee2e6b7ca0a (fixed)
Vendor states this is fixed in e516e187bf32d8decc7c7d0025ae4857cad13c0e (fixed)
Vendor states this is fixed in f6cb7828c8e17520d4f5afb416515d3fae1af9a9 (fixed)
Vendor states this is fixed in 4.19 (unaffected)
Vendor states this is fixed in 5.10.237 (unaffected)
Vendor states this is fixed in 5.15.181 (unaffected)
Vendor states this is fixed in 5.4.293 (unaffected)
Vendor states this is fixed in 6.1.135 (unaffected)
Vendor states this is fixed in 6.12.25 (unaffected)
Vendor states this is fixed in 6.14.3 (unaffected)
Vendor states this is fixed in 6.15 (unaffected)
Vendor states this is fixed in 6.6.88 (unaffected)

References (10)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0557e70e2aeba8647bf5a950820b67cfb86533db
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/54c9f299ad7d7c4be5d271ed12d01a59e95b8907
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5a4b7181213268c9b07bef8800905528435db44a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/705be96504779e4a333ea042b4779ea941f0ace9
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/770407f6173f4f39f4e2c1b54422b79ce6c98bdb
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9d5118b107b1a2353ed0dff24404aee2e6b7ca0a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e516e187bf32d8decc7c7d0025ae4857cad13c0e
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/f6cb7828c8e17520d4f5afb416515d3fae1af9a9

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card