CVE-2025-40197
media: mc: Clear minor number before put device
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Nov 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
media: mc: Clear minor number before put device
The device minor should not be cleared after the device is released.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/5d327391f9fafeb0938be4fc538dd0bd54a0b2efhttps://git.kernel.org/stable/c/64dbc6f50ce92b7da203b1bcdd96a370bbc9b74dhttps://git.kernel.org/stable/c/7bd4e5367d0940ccec4d7546bb6bd019ab2c71aahttps://git.kernel.org/stable/c/7db47e737128b3585ae679b709b85f3f44cd8750https://git.kernel.org/stable/c/8cfc8cec1b4da88a47c243a11f384baefd092a50https://git.kernel.org/stable/c/8f52c7f38f0f2ee2afc331e6b873acba5e9490a8https://git.kernel.org/stable/c/ac01416d477c2dc6016782635ae022f8cc634a29https://git.kernel.org/stable/c/dd156f44ea82cc249f46c519eed3b2f8983c8002