-

CVE-2025-40193

In the Linux kernel, the following vulnerability has been resolved:

xtensa: simdisk: add input size check in proc_write_simdisk

A malicious user could pass an arbitrarily bad value
to memdup_user_nul(), potentially causing kernel crash.

This follows the same pattern as commit ee76746387f6
("netdevsim: prevent bad user input in nsim_dev_health_break_write()")
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < f40405ccfb87b71175f2d5d004c0b8a0aebcc2cf
Version b6c7e873daf765e41233b9752083b66442703b7a
Status affected
Version < 151bd88859474cdaccc1e4c8b21fbf72dbba2ab4
Version b6c7e873daf765e41233b9752083b66442703b7a
Status affected
Version < d381de7fd4cdc928ede96987dc64b133e6480dd6
Version b6c7e873daf765e41233b9752083b66442703b7a
Status affected
Version < a0c2c36d864ef3676b05cfd8c58b72ee3214cb1a
Version b6c7e873daf765e41233b9752083b66442703b7a
Status affected
Version < 5d5f08fd0cd970184376bee07d59f635c8403f63
Version b6c7e873daf765e41233b9752083b66442703b7a
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.9
Status affected
Version < 3.9
Version 0
Status unaffected
Version <= 6.1.*
Version 6.1.157
Status unaffected
Version <= 6.6.*
Version 6.6.113
Status unaffected
Version <= 6.12.*
Version 6.12.54
Status unaffected
Version <= 6.17.*
Version 6.17.4
Status unaffected
Version <= *
Version 6.18
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String