CVE-2025-40056 — Improper Input Validation in Linux
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 87.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 28
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
vhost: vringh: Fix copy_to_iter return value check
The return value of copy_to_iter can't be negative, check whether the
copied length is equal to the requested length instead of checking for
negative values.
Affected Packages7 packages
▶CVEListV5linux/linux309bba39c945ac8ab8083ac05cd6cfe5822968e0 — bd71e7e0a612740e4de5524880c7cd40293af5f7+5