Kernel Vulnerability in Linux Package: Warning Fix in PPS Device Registration
Summary
DEBIAN-CVE-2025-40070: In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail Similar to previous commit 2a934fdb01db ("media: v4l2-dev: fix error handling in video_r... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. It is known for its robustness and flexibility, supporting a wide range of devices and architectures. However, like any complex software, it is susceptible to vulnerabilities that can affect system stability and security. This specific vulnerability relates to the PPS (Pulse Per Second) subsystem, which is used for precise timekeeping in various applications.
Vulnerability Detail
In the Linux kernel, a vulnerability was identified in the PPS subsystem where a warning could occur during the registration of a PPS character device. This issue arises when the release hook is not set before the device registration, leading to potential warnings if the registration fails. The warning message indicates a problem in the device release process, which can result in system instability or unexpected behavior. The vulnerability was introduced in earlier versions and has been addressed in subsequent commits.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate any risks associated with this issue.
Conclusion
The vulnerability CVE-2025-40070 in the Linux kernel's PPS subsystem poses a risk of warnings during device registration, which can affect system stability. Users are encouraged to update their systems to the latest patched version to address this issue effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-40070 is a vulnerability in the Linux kernel related to the PPS subsystem, which can cause warnings during device registration.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
The vulnerability can lead to system warnings and potentially affect the stability of the kernel, especially in applications relying on precise timekeeping.
Yes, a patch has been released. Users should update their Linux kernel to the latest version to ensure they have the fix.
While there are no specific workarounds, it is advisable to monitor the situation and apply the patch as soon as possible to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
