What’s Vulnerable › Vulnerabilities

CVE-2025-40202: ipmi: Rework user message limit handling

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-12 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: ipmi: Rework user message limit handling The limit on the number of user messages had a number of issues, improper counting in some cases and a use after free. Restructure how this is all done to handle more in the receive message allocation routine, so all refcouting and user message limit counts are done in that routine. It's a lot cleaner and safer.

Affected products

• Linux kernel: 5.19 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0ed73be9a2547ffb9b5c1d879ad9bfab73d920b5
• https://git.kernel.org/stable/c/348121b29594d42d1635648fd3ed31dfa25351d5
• https://git.kernel.org/stable/c/53d6e403affbf6df2c859a0ea00ccfc1e72090ca
• https://git.kernel.org/stable/c/b52da4054ee0bf9ecb44996f2c83236ff50b3812
• https://git.kernel.org/stable/c/f63723ca7d7623f9dae1990973cd158671f03c56

Get alerted when CVE-2025-40202 or the next vulnerability affects your stack