Riskcovery

CVE-2025-39940

dm-stripe: fix a possible integer overflow

State
Published
Severity
Not scored
Published
Oct 4, 2025
Updated
Oct 21, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dm-stripe: fix a possible integer overflow

There's a possible integer overflow in stripe_io_hints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits->io_min and limits->io_opt;

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 40bea431274c247425e7f5970d796ff7b37a2b22 to before 891ab8c6954199e4f36029b49df86c8b1d6b0b2fAffected
  • 40bea431274c247425e7f5970d796ff7b37a2b22 to before f8f64254bca5ae58f3b679441962bda4c409f659Affected
  • 40bea431274c247425e7f5970d796ff7b37a2b22 to before ee27658c239b27721397f3e4eb16370b5cce596eAffected
  • 40bea431274c247425e7f5970d796ff7b37a2b22 to before 1071d560afb4c245c2076494226df47db5a35708Affected
LinuxLinux
  • 2.6.31Affected
  • before 2.6.31Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.49 through 6.12.*Not affected
  • 6.16.9 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.