CVE-2025-40217 — Improper Validation of Specified Type of Input in Linux

CWE-1287 — Improper Validation of Specified Type of Input16 documents7 sources
Severity
5.2MEDIUM
No vector
EPSS
0.0%
top 89.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelDebian Linux+1 more
Timeline
PublishedDec 4
Latest updateFeb 24

Description

In the Linux kernel, the following vulnerability has been resolved: pidfs: validate extensible ioctls Validate extensible ioctls stricter than we do now.

Affected Packages6 packages

▶Linuxlinux/linux_kernel6.11.0 — 6.17.4
▶Debianlinux/linux_kernel< 6.17.6-1
▶Ubuntulinux/linux_kernel< 6.17.0-14.14
▶CVEListV5linux/linux5b08bd408534bfb3a7cf5778da5b27d4e4fffe12 — bf0fbf5e8b0aff8a4a0fb35e32b10083baa83c04+2

🔴Vulnerability Details

8
OSV
linux-azure vulnerabilities↗2026-02-24
▶
OSV
linux-oem-6.17 vulnerabilities↗2026-02-17
▶
OSV
linux-aws, linux-oracle vulnerabilities↗2026-02-17
▶
OSV
linux-gcp vulnerabilities↗2026-02-12
▶
OSV
linux, linux-raspi, linux-realtime vulnerabilities↗2026-02-12
▶

📋Vendor Advisories

7
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-02-24
▶
Ubuntu
Linux kernel (OEM) vulnerabilities↗2026-02-17
▶
Ubuntu
Linux kernel (GCP) vulnerabilities↗2026-02-12
▶
Ubuntu
Linux kernel vulnerabilities↗2026-02-12
▶
Microsoft
pidfs: validate extensible ioctls↗2025-12-09
▶