PT-2025-44147 · Risc-V +1 · Risc-V +1

Published 2025-10-28 · Updated 2025-10-28 · CVE-2025-40079

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc1-g2465bb83e0b4

Description The Linux kernel contains a flaw related to how return values from BPF (Berkeley Packet Filter) programs are handled, specifically when dealing with struct operations on the RISC-V architecture. The issue arises because the BPF FIFO dequeue program returns a pointer that is treated as a 32-bit value and sign-extended to 64-bit, which is incorrect for struct operations requiring the RISC-V ABI (Application Binary Interface). This can lead to a kernel panic, as demonstrated by the ns bpf qdisc selftest triggering an inability to handle kernel paging requests.

Recommendations Update to Linux kernel version 6.17.0-rc1-g2465bb83e0b4 or a later version that includes the fix.

Related Identifiers

CVE-2025-40079

Affected Products

Linux Kernel

Risc-V

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-40079 · Security Note
• https://git.kernel.org/stable/c/918a399501e28e0cc36dbd1fcfb4208f8aa1e4d1 · Note
• https://twitter.com/CVEnew/status/1983149437812920405 · Twitter Post
• https://t.me/CVEtracker/35954 · Telegram Post
• https://git.kernel.org/stable/c/fd2e08128944a7679e753f920e9eda72057e427c · Note
• https://git.kernel.org/stable/c/92751937f12a7d34ad492577a251c94a55e97e72 · Note