CVE-2025-39940
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2025-10-04
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripe_io_hints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits->io_min and limits->io_opt;
Weakness Classification (1)
Affected Software (14)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 40bea431274c247425e7f5970d796ff7b37a2b22 < 891ab8c6954199e4f36029b49df86c8b1d6b0b2f |
| Linux | Linux | 40bea431274c247425e7f5970d796ff7b37a2b22 < f8f64254bca5ae58f3b679441962bda4c409f659 |
| Linux | Linux | 40bea431274c247425e7f5970d796ff7b37a2b22 < ee27658c239b27721397f3e4eb16370b5cce596e |
| Linux | Linux | 40bea431274c247425e7f5970d796ff7b37a2b22 < 1071d560afb4c245c2076494226df47db5a35708 |
| Linux | Linux | 2.6.31 |
| linux | linux_kernel | 2.6.31.1 – 6.12.49 |
| linux | linux_kernel | 2.6.31 |
| linux | linux_kernel | 2.6.31 |
| linux | linux_kernel | 6.17 |
| linux | linux_kernel | 6.17 |
| linux | linux_kernel | 6.17 |
| linux | linux_kernel | 6.17 |
| linux | linux_kernel | 6.17 |
| linux | linux_kernel | 6.17 |