CVE-2025-40291: io_uring: fix regbuf vector size truncation
In the Linux kernel, the following vulnerability has been resolved:
iouring: fix regbuf vector size truncation
There is a report of ioestimatebvecsize() truncating the calculated number of segments that leads to corruption issues. Check it doesn't overflow "int"s used later. Rough but simple, can be improved on top.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40291?
CVE-2025-40291 is classified as a high-severity vulnerability in the Linux kernel.
How do I fix CVE-2025-40291?
To fix CVE-2025-40291, ensure that your system is updated to the latest version of the Linux kernel where the vulnerability has been patched.
What are the potential impacts of CVE-2025-40291?
The potential impacts of CVE-2025-40291 include data corruption due to improper handling of buffer sizes.
Which versions of the Linux kernel are affected by CVE-2025-40291?
CVE-2025-40291 affects specific versions of the Linux kernel, particularly those prior to the patch release.
What components are impacted by CVE-2025-40291?
CVE-2025-40291 specifically impacts the io_uring component of the Linux kernel.