SB2025120477 - Improper locking in Linux kernel input keyboard driver
Published: December 4, 2025
Security Bulletin ID
SB2025120477
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper locking (CVE-ID: CVE-2025-40263)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper locking within the cros_ec_keyb_work() function in drivers/input/keyboard/cros_ec_keyb.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/2d251c15c27e2dd16d6318425d2f7260cbd47d39
- https://git.kernel.org/stable/c/6d81068685154535af06163eb585d6d9663ec7ec
- https://git.kernel.org/stable/c/7bfd959187f2c7584bb43280bbc7b2846e7a5085
- https://git.kernel.org/stable/c/9cf59f4724a9ee06ebb06c76b8678ac322e850b7
- https://git.kernel.org/stable/c/e08969c4d65ac31297fcb4d31d4808c789152f68