CVE-2025-40118: Linux 6.15

Affected technology

Linux · 05b512879eab41faa515b67fa3896d0005e97909 to before d94be0a6ae9ade706d4270e740bdb4f79953a7fc, bc2140c8136200b4437e1abc0fb659968cb9baab to before 45acbf154befedd9bc135f5e031fe7855d1e6493, 1d8f9378cb4800c18e20d80ecd605b2b93e87a03 to before eef5ef400893f8e3dbb09342583be0cdc716d566, 30e482dfb8f27d22f518695d4bcb5e7f4c6cb08a to before 9c671d4dbfbfb0d73cfdfb706afb36d9ad60a582, a862d24e1fc3ab1b5e5f20878d2898cea346d0ec to before e62251954a128a2d0fcbc19e5fa39e08935bb628, 0f9802f174227f553959422f844eeb9ba72467fe to before 9326a1541e1b7ed3efdbab72061b82cf01c6477a, f7b705c238d1483f0a766e2b20010f176e5c0fb7 to before 83ced3c206c292458e47c7fac54223abc7141585, f7b705c238d1483f0a766e2b20010f176e5c0fb7 to before 251be2f6037fb7ab399f68cd7428ff274133d693, 722026c010fa75bcf9e2373aff1d7930a3d7e3cf, 5.4.293 to before 5.4.301, 5.10.237 to before 5.10.246, 5.15.181 to before 5.15.195, 6.1.136 to before 6.1.156, 6.6.89 to before 6.6.112, 6.12.26 to before 6.12.53, 6.14.5 to before 6.15
Linux

Linux · 6.15
Linux

Component: Not specified by the source
File: drivers/scsi/pm8001/pm8001_sas.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.