In the Linux kernel, the following vulnerability has been resolved:
platform/mellanox: mlxbf-pmc: add sysfsattrinit() to count_clock init
The lock-related debug logic (CONFIGLOCKSTAT) in the kernel is noting the following warning when the BlueField-3 SOC is booted:
BUG: key ffff00008a3402a8 has not been registered! ------------[ cut here ]------------ DEBUGLOCKSWARNON(1) WARNING: CPU: 4 PID: 592 at kernel/locking/lockdep.c:4801 lockdepinitmaptype+0x1d4/0x2a0 <snip> Call trace: lockdepinitmap_type+0x1d4/0x2a0 __kernfscreatefile+0x84/0x140 sysfsaddfilemodens+0xcc/0x1cc internalcreategroup+0x110/0x3d4 internalcreategroups.part.0+0x54/0xcc sysfscreategroups+0x24/0x40 deviceadd+0x6e8/0x93c deviceregister+0x28/0x40 _hwmondeviceregister+0x4b0/0x8a0 devmhwmondeviceregisterwithgroups+0x7c/0xe0 mlxbfpmcprobe+0x1e8/0x3e0 [mlxbfpmc] platformprobe+0x70/0x110
The mlxbfpmc driver must call sysfsattrinit() during the initialization of the "countclock" data structure to avoid this warning.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40352.json"
}