CVE-2025-40051: vhost: vringh: Modify the return value check
In the Linux kernel, the following vulnerability has been resolved:
vhost: vringh: Modify the return value check
The return value of copyfromiter and copytoiter can't be negative, check whether the copied lengths are equal.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.15-1Fixed in 7.3.3-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40051?
CVE-2025-40051 is classified as a medium severity vulnerability.
How do I fix CVE-2025-40051?
To fix CVE-2025-40051, apply the latest updates or patches provided for the affected Linux kernel version.
Which software is affected by CVE-2025-40051?
CVE-2025-40051 affects the Microsoft azl3 kernel version 6.6.104.2-4.
What types of attacks can exploit CVE-2025-40051?
CVE-2025-40051 could be exploited in scenarios that involve manipulating vringh components in networking contexts.
Is there a workaround for CVE-2025-40051?
As of now, there are no specified workarounds for CVE-2025-40051; updating the kernel is the recommended approach.