CVE-2025-40056

Linux Kernel 6.0.0-6.17.2 DoS via Incorrect copy_to_iter Return Value Check

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Fix copy_to_iter return value check The return value of copy_to_iter can't be negative, check whether the copied length is equal to the requested length instead of checking for negative values.

References (5)

Core 5

Core References

Patch

https://git.kernel.org/stable/c/bd71e7e0a612740e4de5524880c7cd40293af5f7

Patch

https://git.kernel.org/stable/c/781226e11d5bdea0d69c7b5aa3cda874093c73b8

Patch

https://git.kernel.org/stable/c/b3a950d236e98440c07405ba597b11bce56a8050

Patch

https://git.kernel.org/stable/c/68aac2b335d474b938d154b9c95cbc58838cb2ce

Patch

https://git.kernel.org/stable/c/439263376c2c4e126cac0d07e4987568de4eaba5

Scores

EPSS 0.0020

EPSS Percentile 9.6%

Details

Status published

Products (16)

linux/Kernel 6.0.0 - 6.1.156linux

linux/Kernel 6.13.0 - 6.17.3linux

linux/Kernel 6.2.0 - 6.6.112linux

linux/Kernel 6.7.0 - 6.12.53linux

Linux/Linux < 6.0

Linux/Linux 309bba39c945ac8ab8083ac05cd6cfe5822968e0 - 439263376c2c4e126cac0d07e4987568de4eaba5

Linux/Linux 309bba39c945ac8ab8083ac05cd6cfe5822968e0 - 68aac2b335d474b938d154b9c95cbc58838cb2ce

Linux/Linux 309bba39c945ac8ab8083ac05cd6cfe5822968e0 - 781226e11d5bdea0d69c7b5aa3cda874093c73b8

Linux/Linux 309bba39c945ac8ab8083ac05cd6cfe5822968e0 - b3a950d236e98440c07405ba597b11bce56a8050

Linux/Linux 309bba39c945ac8ab8083ac05cd6cfe5822968e0 - bd71e7e0a612740e4de5524880c7cd40293af5f7

... and 6 more

Published Oct 28, 2025

Tracked Since Feb 18, 2026