CVE-2025-40008 — Linux vulnerability

23 documents6 sources
Severity
3.2LOWOSV
No vector
EPSS
0.0%
top 87.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelDebian Linux+1 more
Timeline
PublishedOct 20
Latest updateApr 9

Description

In the Linux kernel, the following vulnerability has been resolved: kmsan: fix out-of-bounds access to shadow memory Running sha224_kunit on a KMSAN-enabled kernel results in a crash in kmsan_internal_set_shadow_origin(): BUG: unable to handle page fault for address: ffffbc3840291000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 1810067 P4D 1810067 PUD 192d067 PMD 3c17067 PTE 0 Oops: 0000 [#1] SMP NOPTI CPU: 0 UID: 0 PID: 81 Comm: kunit_try_catch Ta…

Affected Packages6 packages

▶Linuxlinux/linux_kernel6.2.0 — 6.6.109+3
▶Debianlinux/linux_kernel< 6.1.158-1+2
▶Ubuntulinux/linux_kernel< 6.8.0-106.106
▶CVEListV5linux/linux9ff078f5bad8990091f1639347de5e02636e9536 — e6684ed39edc35401a3341f85b1ab50a6f89a45d+6
▶debiandebian/linux< linux 6.1.158-1 (bookworm)

🔴Vulnerability Details

11
OSV
linux-raspi, linux-raspi-realtime vulnerabilities↗2026-04-01
▶
OSV
linux-azure-6.8 vulnerabilities↗2026-03-25
▶
OSV
linux-azure vulnerabilities↗2026-03-25
▶
OSV
linux-aws-6.8 vulnerabilities↗2026-03-23
▶
OSV
linux-realtime, linux-realtime-6.8 vulnerabilities↗2026-03-17
▶

📋Vendor Advisories

11
Ubuntu
Linux kernel (Azure FIPS) vulnerabilities↗2026-04-09
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2026-04-01
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (AWS) vulnerabilities↗2026-03-23
▶