CVE-2025-39940: dm-stripe: fix a possible integer overflow
Published Oct 4, 2025
·Updated
dm-stripe: fix a possible integer overflow
Affected Software
15 affected components
Linux Linux kernel
Microsoft azl3 kernel 6.6.96.2-2
Microsoft azl3 kernel 6.6.104.2-4
Microsoft azl3 kernel 6.6.112.1-2
Microsoft azl3 kernel 6.6.117.1-1
Linux Linux kernel>=2.6.31.1<6.12.49
Linux Linux kernel>=6.13<6.16.9
Linux Linux kernel=2.6.31
Linux Linux kernel=2.6.31-rc9
Linux Linux kernel=6.17-rc1
Linux Linux kernel=6.17-rc2
Linux Linux kernel=6.17-rc3
Linux Linux kernel=6.17-rc4
Linux Linux kernel=6.17-rc5
Linux Linux kernel=6.17-rc6
Remediation
Event History
Oct 4, 2025
CVE Published
via MITRE·07:31 AM
Data Sourced
via MITRE·07:31 AM
Description
Data Sourced
via NVD·08:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 5, 2025
Data Sourced
via Microsoft·01:03 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·01:03 AM
Affected Software
Updated
via Microsoft·01:03 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-39940?
CVE-2025-39940 has been classified with a severity level that indicates it poses a potential risk due to an integer overflow in the Linux kernel.
2
How do I fix CVE-2025-39940?
To fix CVE-2025-39940, you should update the Linux kernel to the latest version where this vulnerability has been addressed.
3
Who is affected by CVE-2025-39940?
CVE-2025-39940 affects users and systems running vulnerable versions of the Linux kernel that utilize the dm-stripe module.
4
What kind of vulnerability is CVE-2025-39940?
CVE-2025-39940 is an integer overflow vulnerability that can occur in stripe_io_hints with excessively large chunk sizes.
5
What are the potential impacts of CVE-2025-39940?
The potential impacts of CVE-2025-39940 include system instability or unauthorized access if the integer overflow is exploited.