In the Linux kernel, the following vulnerability has been resolved:
misc: pciendpointtest: Avoid issue of interrupts remaining after request_irq error
After devmrequestirq() fails with error in pciendpointtestrequestirq(), the pciendpointtestfreeirq_vectors() is called assuming that all IRQs have been released.
However, some requested IRQs remain unreleased, so there are still /proc/irq/* entries remaining, and this results in WARN() with the following message:
removeprocentry: removing non-empty directory 'irq/30', leaking at least 'pci-endpoint-test.0' WARNING: CPU: 0 PID: 202 at fs/proc/generic.c:719 removeprocentry +0x190/0x19c
To solve this issue, set the number of remaining IRQs to test->numirqs, and release IRQs in advance by calling pciendpointtestrelease_irq().
[kwilczynski: commit log]
[
{
"id": "CVE-2025-23140-3949056d",
"target": {
"file": "drivers/misc/pci_endpoint_test.c",
"function": "pci_endpoint_test_request_irq"
},
"digest": {
"function_hash": "165738531376656918353178601887055017878",
"length": 750.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e516e187bf32d8decc7c7d0025ae4857cad13c0e",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-3f0cb1d1",
"target": {
"file": "drivers/misc/pci_endpoint_test.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"217097364716901656266259603441933348122",
"296599009438651474580404452929488205716",
"161304772631933132051060782551310259491"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@770407f6173f4f39f4e2c1b54422b79ce6c98bdb",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-4840be47",
"target": {
"file": "drivers/misc/pci_endpoint_test.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"58005093793094196684240679085376862507",
"260939818620154303725839704720727657839",
"216596874495723193474077875077334055427"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e516e187bf32d8decc7c7d0025ae4857cad13c0e",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-49a50872",
"target": {
"file": "drivers/misc/pci_endpoint_test.c",
"function": "pci_endpoint_test_request_irq"
},
"digest": {
"function_hash": "165738531376656918353178601887055017878",
"length": 750.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54c9f299ad7d7c4be5d271ed12d01a59e95b8907",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-52046eb8",
"target": {
"file": "drivers/misc/pci_endpoint_test.c",
"function": "pci_endpoint_test_request_irq"
},
"digest": {
"function_hash": "117226688672726296208566797168554688597",
"length": 743.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@770407f6173f4f39f4e2c1b54422b79ce6c98bdb",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-81ca78c3",
"target": {
"file": "drivers/misc/pci_endpoint_test.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"58005093793094196684240679085376862507",
"260939818620154303725839704720727657839",
"216596874495723193474077875077334055427"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54c9f299ad7d7c4be5d271ed12d01a59e95b8907",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-8fd9367a",
"target": {
"file": "drivers/misc/pci_endpoint_test.c",
"function": "pci_endpoint_test_request_irq"
},
"digest": {
"function_hash": "117226688672726296208566797168554688597",
"length": 743.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f6cb7828c8e17520d4f5afb416515d3fae1af9a9",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-c478bd5c",
"target": {
"file": "drivers/misc/pci_endpoint_test.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"58005093793094196684240679085376862507",
"260939818620154303725839704720727657839",
"330612642610475650076911507975558428275"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0557e70e2aeba8647bf5a950820b67cfb86533db",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-d0ab1cf4",
"target": {
"file": "drivers/misc/pci_endpoint_test.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"58005093793094196684240679085376862507",
"260939818620154303725839704720727657839",
"216596874495723193474077875077334055427"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@705be96504779e4a333ea042b4779ea941f0ace9",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-d62e759a",
"target": {
"file": "drivers/misc/pci_endpoint_test.c",
"function": "pci_endpoint_test_request_irq"
},
"digest": {
"function_hash": "272684164924088211663166083457025297430",
"length": 752.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@705be96504779e4a333ea042b4779ea941f0ace9",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-dd06f3c0",
"target": {
"file": "drivers/misc/pci_endpoint_test.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"217097364716901656266259603441933348122",
"296599009438651474580404452929488205716",
"161304772631933132051060782551310259491"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f6cb7828c8e17520d4f5afb416515d3fae1af9a9",
"signature_version": "v1"
},
{
"id": "CVE-2025-23140-f2d0d64e",
"target": {
"file": "drivers/misc/pci_endpoint_test.c",
"function": "pci_endpoint_test_request_irq"
},
"digest": {
"function_hash": "333542419991267559414166928707553270807",
"length": 757.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0557e70e2aeba8647bf5a950820b67cfb86533db",
"signature_version": "v1"
}
]