CVE-2025-40056

vhost: vringh: Fix copy_to_iter return value check

State: Published
Severity: Not scored
Published: Oct 28, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

vhost: vringh: Fix copy_to_iter return value check

The return value of copy_to_iter can't be negative, check whether the copied length is equal to the requested length instead of checking for negative values.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before bd71e7e0a612740e4de5524880c7cd40293af5f7Affected 309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before 781226e11d5bdea0d69c7b5aa3cda874093c73b8Affected 309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before b3a950d236e98440c07405ba597b11bce56a8050Affected 309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before 68aac2b335d474b938d154b9c95cbc58838cb2ceAffected 309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before 439263376c2c4e126cac0d07e4987568de4eaba5Affected
LinuxLinux	6.0Affected before 6.0Not affected 6.1.156 through 6.1.Not affected 6.6.112 through 6.6.Not affected 6.12.53 through 6.12.Not affected 6.17.3 through 6.17.Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before bd71e7e0a612740e4de5524880c7cd40293af5f7Affected
309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before 781226e11d5bdea0d69c7b5aa3cda874093c73b8Affected
309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before b3a950d236e98440c07405ba597b11bce56a8050Affected
309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before 68aac2b335d474b938d154b9c95cbc58838cb2ceAffected
309bba39c945ac8ab8083ac05cd6cfe5822968e0 to before 439263376c2c4e126cac0d07e4987568de4eaba5Affected

LinuxLinux

6.0Affected
before 6.0Not affected
6.1.156 through 6.1.*Not affected
6.6.112 through 6.6.*Not affected
6.12.53 through 6.12.*Not affected
6.17.3 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.