CVE-2025-40050: bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer
In the Linux kernel, the following vulnerability has been resolved:
bpf: Skip scalar adjustment for BPFNEG if dst is a pointer
In checkaluop(), the verifier currently calls checkregarg() and adjustscalarminmaxvals() unconditionally for BPFNEG operations. However, if the destination register holds a pointer, these scalar adjustments are unnecessary and potentially incorrect.
This patch adds a check to skip the adjustment logic when the destination register contains a pointer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40050?
CVE-2025-40050 is classified as a medium-severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-40050?
To fix CVE-2025-40050, ensure that your Linux kernel is updated to the latest stable version that includes the security patch.
What software is affected by CVE-2025-40050?
CVE-2025-40050 affects the Linux kernel, specifically versions prior to the inclusion of the patch addressing this vulnerability.
What kind of exploitation is possible with CVE-2025-40050?
CVE-2025-40050 could potentially allow unauthorized operations in the BPF (Berkeley Packet Filter) environment.
When was CVE-2025-40050 reported?
CVE-2025-40050 was reported in 2025, indicating a proactive discovery of a vulnerability in the Linux kernel.