CVE-2025-40291 — io_uring: fix regbuf vector size truncation
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix regbuf vector size truncation There is a report of io_estimate_bvec_size() truncating the cal…
Published: 2025-12-08 · CVSS: 7.8 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix regbuf vector size truncation There is a report of io_estimate_bvec_size() truncating the calculated number of segments that leads to corruption issues. Check it doesn't overflow "int"s used later. Rough but simple, can be improved on top.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7