CVE-2025-40145

Source
https://cve.org/CVERecord?id=CVE-2025-40145
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40145.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-40145
Downstream
Published
2025-11-12T10:23:26.013Z
Modified
2025-12-05T10:21:45.322402Z
Summary
PCI/pwrctrl: Fix double cleanup on devm_add_action_or_reset() failure
Details

In the Linux kernel, the following vulnerability has been resolved:

PCI/pwrctrl: Fix double cleanup on devmaddactionorreset() failure

When devmaddactionorreset() fails, it calls the passed cleanup function. Hence the caller must not repeat that cleanup.

Replace the "goto errregulatorfree" by the actual freeing, as there will never be a need again for a second user of this label.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40145.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
75996c92f4de309f855471927e6489f5a354cfd4
Fixed
77732c58fef6247b71493dc3997af0ec0aaad5c7
Fixed
ab81f2f79c683c94bac622aafafbe8232e547159

Affected versions

v6.*
v6.14
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.16
v6.16-rc1
v6.16-rc2
v6.16-rc3
v6.16-rc4
v6.16-rc5
v6.16-rc6
v6.16-rc7
v6.17
v6.17-rc1
v6.17-rc2
v6.17-rc3
v6.17-rc4
v6.17-rc5
v6.17-rc6
v6.17-rc7
v6.17.1
v6.17.2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40145.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.15.0
Fixed
6.17.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40145.json"