CVE-2025-40172 — Linux vulnerability
33 documents7 sources
Severity
5.5MEDIUMOSV
OSV3.2
No vectorEPSS
0.0%
top 92.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
Currently, if find_and_map_user_pages() takes a DMA xfer request from the
user with a length field set to 0, or in a rare case, the host receives
QAIC_TRANS_DMA_XFER_CONT from the device where resources->xferred_dma_size
is equal to the requested transaction size, the function will return 0
before allocating an sgt or setting the fields of the dma_xfer stru…
Affected Packages6 packages
▶CVEListV5linux/linux96d3c1cadedb6ae2e8965e19cd12caa244afbd9c — 48b1d42286bfef7628b1d6c8c28d4e456c90f725+5