Security Advisory

CVE-2025-40291

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-08 00:46:14
Last updated 2026-05-11 21:46:30
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix regbuf vector size truncation There is a report of io_estimate_bvec_size() truncating the calculated number of segments that leads to corruption issues. Check it doesnt overflow "int"s used later. Rough but simple, can be improved on top.