CVE-2025-40291
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/12/2025
Last modified:
08/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
io_uring: fix regbuf vector size truncation<br />
<br />
There is a report of io_estimate_bvec_size() truncating the calculated<br />
number of segments that leads to corruption issues. Check it doesn&#39;t<br />
overflow "int"s used later. Rough but simple, can be improved on top.