Riskcovery

CVE-2025-40226

firmware: arm_scmi: Account for failed debug initialization

State
Published
Severity
Not scored
Published
Dec 4, 2025
Updated
May 23, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Account for failed debug initialization

When the SCMI debug subsystem fails to initialize, the related debug root will be missing, and the underlying descriptor will be NULL.

Handle this fault condition in the SCMI debug helpers that maintain metrics counters.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b38812942556819263256cb77fbdc9eae7aa5b1b to before d719ce9f286c439795cd2beee4c91f12b84bc5a0Affected
  • 0b3d48c4726e1b20dffd2ff81a9d94d5d930220b to before e088efcd97cb7c7297d166bb52c3b87a29f6a0b1Affected
  • 0b3d48c4726e1b20dffd2ff81a9d94d5d930220b to before 554c9d5c6c695aedaecfb4365c187102709397b0Affected
  • 0b3d48c4726e1b20dffd2ff81a9d94d5d930220b to before 2290ab43b9d8eafb8046387f10a8dfa2b030ba46Affected
  • 6.6.92 to before 6.6.115Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.6.115 through 6.6.*Not affected
  • 6.12.56 through 6.12.*Not affected
  • 6.17.6 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.