PT-2025-49424 · Linux+2 · Linux Kernel+2

Published 2025-12-08 · Updated 2026-02-24 · CVE-2025-40291

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to io uring, specifically a truncation issue within the io estimate bvec size() function. This truncation can lead to corruption issues. The problem involves the calculation of the number of segments, where integer overflows may occur.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-40291

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 392

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40291.json · Exploit
• https://ubuntu.com/security/CVE-2025-40153 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40066 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40331 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40063 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40049 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40315 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40223 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68246 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory