{"api_version":"1","generated_at":"2026-10-21T15:12:31+00:00","cve":"CVE-2025-40136","urls":{"html":"https://cve.report/CVE-2025-40136","api":"https://cve.report/api/cve/CVE-2025-40136.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-40136","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-40136"},"summary":{"title":"crypto: hisilicon/qm - request reserved interrupt for virtual function","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: hisilicon/qm - request reserved interrupt for virtual function\n\nThe device interrupt vector 3 is an error interrupt for\nphysical function and a reserved interrupt for virtual function.\nHowever, the driver has not registered the reserved interrupt for\nvirtual function. When allocating interrupts, the number of interrupts\nis allocated based on powers of two, which includes this interrupt.\nWhen the system enables GICv4 and the virtual function passthrough\nto the virtual machine, releasing the interrupt in the driver\ntriggers a warning.\n\nThe WARNING report is:\nWARNING: CPU: 62 PID: 14889 at arch/arm64/kvm/vgic/vgic-its.c:852 its_free_ite+0x94/0xb4\n\nTherefore, register a reserved interrupt for VF and set the\nIRQF_NO_AUTOEN flag to avoid that warning.","state":"PUBLISHED","assigner":"Linux","published_at":"2025-11-12 11:15:43","updated_at":"2026-10-21 13:18:19"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/5f75857ed634d04266301d7a4f695a7deeb9bfdc","name":"https://git.kernel.org/stable/c/5f75857ed634d04266301d7a4f695a7deeb9bfdc","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/854da2b0df1654d63963d587b12fec6068d89643","name":"https://git.kernel.org/stable/c/854da2b0df1654d63963d587b12fec6068d89643","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/24315474ca913c0693939ab74b389ee04c7d3020","name":"https://git.kernel.org/stable/c/24315474ca913c0693939ab74b389ee04c7d3020","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/9228facb308157ac0bdd264b873187896f7a9c7a","name":"https://git.kernel.org/stable/c/9228facb308157ac0bdd264b873187896f7a9c7a","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-40136","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40136","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe 5f75857ed634d04266301d7a4f695a7deeb9bfdc git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe 24315474ca913c0693939ab74b389ee04c7d3020 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe 854da2b0df1654d63963d587b12fec6068d89643 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe 9228facb308157ac0bdd264b873187896f7a9c7a git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.1","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.1 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.6.160 6.6.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.114 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.17.3 6.17.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2025","cve_id":"40136","cve":"CVE-2025-40136","epss":"0.001980000","percentile":"0.090220000","score_date":"2026-10-19","updated_at":"2026-10-20 00:13:48"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/crypto/hisilicon/qm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5f75857ed634d04266301d7a4f695a7deeb9bfdc","status":"affected","version":"3536cc55cadaf2a03241915f9cfdaf6cd073e4fe","versionType":"git"},{"lessThan":"24315474ca913c0693939ab74b389ee04c7d3020","status":"affected","version":"3536cc55cadaf2a03241915f9cfdaf6cd073e4fe","versionType":"git"},{"lessThan":"854da2b0df1654d63963d587b12fec6068d89643","status":"affected","version":"3536cc55cadaf2a03241915f9cfdaf6cd073e4fe","versionType":"git"},{"lessThan":"9228facb308157ac0bdd264b873187896f7a9c7a","status":"affected","version":"3536cc55cadaf2a03241915f9cfdaf6cd073e4fe","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/crypto/hisilicon/qm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.1"},{"lessThan":"6.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.160","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.114","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","version":"6.17.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.18","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.160","versionStartIncluding":"6.1","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.114","versionStartIncluding":"6.1","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.17.3","versionStartIncluding":"6.1","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18","versionStartIncluding":"6.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: hisilicon/qm - request reserved interrupt for virtual function\n\nThe device interrupt vector 3 is an error interrupt for\nphysical function and a reserved interrupt for virtual function.\nHowever, the driver has not registered the reserved interrupt for\nvirtual function. When allocating interrupts, the number of interrupts\nis allocated based on powers of two, which includes this interrupt.\nWhen the system enables GICv4 and the virtual function passthrough\nto the virtual machine, releasing the interrupt in the driver\ntriggers a warning.\n\nThe WARNING report is:\nWARNING: CPU: 62 PID: 14889 at arch/arm64/kvm/vgic/vgic-its.c:852 its_free_ite+0x94/0xb4\n\nTherefore, register a reserved interrupt for VF and set the\nIRQF_NO_AUTOEN flag to avoid that warning."}],"providerMetadata":{"dateUpdated":"2026-10-21T12:37:49.467Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/5f75857ed634d04266301d7a4f695a7deeb9bfdc"},{"url":"https://git.kernel.org/stable/c/24315474ca913c0693939ab74b389ee04c7d3020"},{"url":"https://git.kernel.org/stable/c/854da2b0df1654d63963d587b12fec6068d89643"},{"url":"https://git.kernel.org/stable/c/9228facb308157ac0bdd264b873187896f7a9c7a"}],"title":"crypto: hisilicon/qm - request reserved interrupt for virtual function","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2025-40136","datePublished":"2025-11-12T10:23:23.330Z","dateReserved":"2025-04-16T07:20:57.171Z","dateUpdated":"2026-10-21T12:37:49.467Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2025-11-12 11:15:43","lastModifiedDate":"2026-10-21 13:18:19","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"40136","Ordinal":"1","Title":"crypto: hisilicon/qm - request reserved interrupt for virtual fu","CVE":"CVE-2025-40136","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"40136","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: hisilicon/qm - request reserved interrupt for virtual function\n\nThe device interrupt vector 3 is an error interrupt for\nphysical function and a reserved interrupt for virtual function.\nHowever, the driver has not registered the reserved interrupt for\nvirtual function. When allocating interrupts, the number of interrupts\nis allocated based on powers of two, which includes this interrupt.\nWhen the system enables GICv4 and the virtual function passthrough\nto the virtual machine, releasing the interrupt in the driver\ntriggers a warning.\n\nThe WARNING report is:\nWARNING: CPU: 62 PID: 14889 at arch/arm64/kvm/vgic/vgic-its.c:852 its_free_ite+0x94/0xb4\n\nTherefore, register a reserved interrupt for VF and set the\nIRQF_NO_AUTOEN flag to avoid that warning.","Type":"Description","Title":"crypto: hisilicon/qm - request reserved interrupt for virtual fu"}]}}}