CVEvulnerability
CVE-2025-39940
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-10-04
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-190
Description
In the Linux kernel, the following vulnerability has been resolved:
dm-stripe: fix a possible integer overflow
There's a possible integer overflow in stripe_io_hints if we have too
large chunk size. Test if the overflow happened, and if it did, don't set
limits->io_min and limits->io_opt;
Affected configurations
• linux linux kernel (>= 2.6.31.1 < 6.12.49)
• linux linux kernel (>= 6.13 < 6.16.9)
• linux linux kernel 2.6.31
• linux linux kernel 6.17
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://git.kernel.org/stable/c/1071d560afb4c245c2076494226df47db5a35708 Patch
- https://git.kernel.org/stable/c/891ab8c6954199e4f36029b49df86c8b1d6b0b2f git.kernel.org
- https://git.kernel.org/stable/c/ee27658c239b27721397f3e4eb16370b5cce596e Patch
- https://git.kernel.org/stable/c/f8f64254bca5ae58f3b679441962bda4c409f659 Patch