Ecosystem	Package	Version

Vulnerabilities

CVE-2025-40202

CVE-2025-40202

In the Linux kernel, the following vulnerability has been resolved: ipmi: Rework user message limit handling The limit on the number of user messages had a number of issues, improper counting in some cases and a use after free. Restructure how this is all done to handle more in the receive message allocation routine, so all refcouting and user message limit counts are done in that routine. It's a lot cleaner and safer.

Published Nov 13, 2025

https://lore.kernel.org/linux-cve-announce/2025111246-CVE-2025-40202-f5ad@gregkh/

CVSS ScoreMedium

6.9

Ecosystem	Package	Version


rpm	kernel	6.11.0-0.rc5.23.el10
rpm	kernel	6.12.0-124.13.1.el10_1
rpm	kernel	6.12.0-124.16.1.el10_1
rpm	kernel	6.12.0-124.20.1.el10_1
rpm	kernel	6.12.0-124.21.1.el10_1
rpm	kernel	6.12.0-124.27.1.el10_1
rpm	kernel	6.12.0-124.28.1.el10_1
rpm	kernel	6.12.0-124.29.1.el10_1
rpm	kernel	6.12.0-124.31.1.el10_1
rpm	kernel	6.12.0-124.35.1.el10_1
rpm	kernel	6.12.0-124.38.1.el10_1
rpm	kernel	6.12.0-124.39.1.el10_1
rpm	kernel	6.12.0-124.40.1.el10_1
rpm	kernel	6.12.0-124.43.1.el10_1
rpm	kernel	6.12.0-124.8.1.el10_1
rpm	kernel	6.12.0-55.19.1.0.1.el10_0
rpm	kernel	6.12.0-55.20.1.0.1.el10_0
rpm	kernel	6.12.0-55.21.1.0.1.el10_0
rpm	kernel	6.12.0-55.22.1.0.1.el10_0
rpm	kernel	6.12.0-55.24.1.0.1.el10_0
rpm	kernel	6.12.0-55.27.1.0.1.el10_0
rpm	kernel	6.12.0-55.28.1.0.1.el10_0
rpm	kernel	6.12.0-55.29.1.0.1.el10_0
rpm	kernel	6.12.0-55.30.1.0.1.el10_0
rpm	kernel	6.12.0-55.31.1.0.1.el10_0
rpm	kernel	6.12.0-55.32.1.0.1.el10_0
rpm	kernel	6.12.0-55.33.1.0.1.el10_0
rpm	kernel	6.12.0-55.34.1.0.1.el10_0
rpm	kernel	6.12.0-55.37.1.0.1.el10_0
rpm	kernel	6.12.0-55.38.1.0.1.el10_0
rpm	kernel	6.12.0-55.39.1.0.1.el10_0
rpm	kernel	6.12.0-55.40.1.0.1.el10_0
rpm	kernel	6.12.0-55.41.1.0.1.el10_0
rpm	kernel	6.12.0-55.42.1.0.1.el10_0
rpm	kernel	6.12.0-55.43.1.0.1.el10_0
rpm	kernel	6.12.0-55.9.1.0.1.el10_0

CVE-2025-40202 | Components Impacted | Sonatype Guide | Sonatype Guide