CVE-2025-40031
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/10/2025
Última modificación:
30/10/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
tee: fix register_shm_helper()<br />
<br />
In register_shm_helper(), fix incorrect error handling for a call to<br />
iov_iter_extract_pages(). A case is missing for when<br />
iov_iter_extract_pages() only got some pages and return a number larger<br />
than 0, but not the requested amount.<br />
<br />
This fixes a possible NULL pointer dereference following a bad input from<br />
ioctl(TEE_IOC_SHM_REGISTER) where parts of the buffer isn&#39;t mapped.