What’s Vulnerable › Vulnerabilities

CVE-2025-40036: misc: fastrpc: fix possible map leak in fastrpc_put_args

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-28 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpc_put_args copy_to_user() failure would cause an early return without cleaning up the fdlist, which has been updated by the DSP. This could lead to map leak. Fix this by redirecting to a cleanup path on failure, ensuring that all mapped buffers are properly released before returning.

Affected products

• Linux kernel: 5.1 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3ad42dc66445df6977cf4be0c06f1a655299ce6c
• https://git.kernel.org/stable/c/78d33a041555db03903e8037fd053ed74fbd88cb
• https://git.kernel.org/stable/c/a085658264d0c8d4f795d4631f77d7289a021de9
• https://git.kernel.org/stable/c/c000f65f0ac93d9f9cc69a230d372f6ca93e4879
• https://git.kernel.org/stable/c/da1ba64176e0138f2bfa96f9e43e8c3640d01e1e

Get alerted when CVE-2025-40036 or the next vulnerability affects your stack