CVE-2025-40046
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/10/2025
Última modificación:
30/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
io_uring/zcrx: fix overshooting recv limit<br />
<br />
It&#39;s reported that sometimes a zcrx request can receive more than was<br />
requested. It&#39;s caused by io_zcrx_recv_skb() adjusting desc->count for<br />
all received buffers including frag lists, but then doing recursive<br />
calls to process frag list skbs, which leads to desc->count double<br />
accounting and underflow.
Impacto
Puntuación base 3.x
8.60
Gravedad 3.x
ALTA