CVE-2025-40051

vhost: vringh: Modify the return value check

State: Published
Severity: 7.8 High
Published: Oct 28, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

vhost: vringh: Modify the return value check

The return value of copy_from_iter and copy_to_iter can't be negative, check whether the copied lengths are equal.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before db042925a5ab7a550b710addeadbf6f72e3a8a4bAffected 309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before 78dc7362662fedaa1928fb8e4f27401c8322905dAffected 309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before baa37b1c7e29546f79c39bef0d18c4edc9f39bb1Affected 309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before cfa0654402c06d086201a9ff167eb95da5844fc3Affected 309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before 82a8d0fda55b35361ee7f35b54fa2b66d7847d2bAffected
LinuxLinux	6.0Affected before 6.0Not affected 6.1.156 through 6.1.Not affected 6.6.112 through 6.6.Not affected 6.12.53 through 6.12.Not affected 6.17.3 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before db042925a5ab7a550b710addeadbf6f72e3a8a4bAffected
309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before 78dc7362662fedaa1928fb8e4f27401c8322905dAffected
309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before baa37b1c7e29546f79c39bef0d18c4edc9f39bb1Affected
309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before cfa0654402c06d086201a9ff167eb95da5844fc3Affected
309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before 82a8d0fda55b35361ee7f35b54fa2b66d7847d2bAffected

LinuxLinux

6.0Affected
before 6.0Not affected
6.1.156 through 6.1.*Not affected
6.6.112 through 6.6.*Not affected
6.12.53 through 6.12.*Not affected
6.17.3 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.