CVE-2025-40262

Input: imx_sc_key - fix memory corruption on unload

State: Published
Severity: 7.8 High
Published: Dec 4, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: imx_sc_key - fix memory corruption on unload

This is supposed to be "priv" but we accidentally pass "&priv" which is an address in the stack and so it will lead to memory corruption when the imx_sc_key_action() function is called. Remove the &.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	768062fd1284529212daffd360314e9aa93abb62 to before 3e96803b169dc948847f0fc2bae729a80914eb7bAffected 768062fd1284529212daffd360314e9aa93abb62 to before 4ce5218b101205b3425099fe3df88a61b58f9cc2Affected 768062fd1284529212daffd360314e9aa93abb62 to before a155292c3ce722036014da5477ee0e4c87b5e6b3Affected 768062fd1284529212daffd360314e9aa93abb62 to before ca9a08de9b294422376f47ade323d69590dbc6f2Affected 768062fd1284529212daffd360314e9aa93abb62 to before 56881294915a6e866d31a46f9bcb5e19167cfbaaAffected 768062fd1284529212daffd360314e9aa93abb62 to before 6524a15d33951b18ac408ebbcb9c16e14e21c336Affected 768062fd1284529212daffd360314e9aa93abb62 to before d83f1512758f4ef6fc5e83219fe7eeeb6b428ea4Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.247 through 5.10.Not affected 5.15.197 through 5.15.Not affected 6.1.159 through 6.1.Not affected 6.6.118 through 6.6.Not affected 6.12.60 through 6.12.Not affected 6.17.10 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

768062fd1284529212daffd360314e9aa93abb62 to before 3e96803b169dc948847f0fc2bae729a80914eb7bAffected
768062fd1284529212daffd360314e9aa93abb62 to before 4ce5218b101205b3425099fe3df88a61b58f9cc2Affected
768062fd1284529212daffd360314e9aa93abb62 to before a155292c3ce722036014da5477ee0e4c87b5e6b3Affected
768062fd1284529212daffd360314e9aa93abb62 to before ca9a08de9b294422376f47ade323d69590dbc6f2Affected
768062fd1284529212daffd360314e9aa93abb62 to before 56881294915a6e866d31a46f9bcb5e19167cfbaaAffected
768062fd1284529212daffd360314e9aa93abb62 to before 6524a15d33951b18ac408ebbcb9c16e14e21c336Affected
768062fd1284529212daffd360314e9aa93abb62 to before d83f1512758f4ef6fc5e83219fe7eeeb6b428ea4Affected

LinuxLinux

5.8Affected
before 5.8Not affected
5.10.247 through 5.10.*Not affected
5.15.197 through 5.15.*Not affected
6.1.159 through 6.1.*Not affected
6.6.118 through 6.6.*Not affected
6.12.60 through 6.12.*Not affected
6.17.10 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.