CVE-2025-40202

In the Linux kernel, the following vulnerability has been resolved:

ipmi: Rework user message limit handling

The limit on the number of user messages had a number of issues, improper counting in some cases and a use after free.

Restructure how this is all done to handle more in the receive message allocation routine, so all refcouting and user message limit counts are done in that routine. It's a lot cleaner and safer.

Red Hat Enterprise Linux is not affected by this vulnerability because the flawed user message accounting mechanism was introduced in an upstream kernel commit not present in Red Hat enterprise kernels. Exploiting this issue would require local access to interact with the IPMI interface to induce reference counting discrepancies and trigger memory corruption. Consequently, this flaw does not present a security risk to supported Red Hat environments.