Riskcovery

CVE-2025-40112

sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara

State
Published
Severity
7.8 High
Published
Nov 12, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara

The referenced commit introduced exception handlers on user-space memory references in copy_from_user and copy_to_user. These handlers return from the respective function and calculate the remaining bytes left to copy using the current register contents. This commit fixes a couple of bad calculations and a broken epilogue in the exception handlers. This will prevent crashes and ensure correct return values of copy_from_user and copy_to_user in the faulting case. The behaviour of memcpy stays unchanged.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 05440320ea3e249d5f984918f2bf51210c1a7c03Affected
  • 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 7823fc4d8ab5e57f8db7806ff2530c03c166c4bbAffected
  • 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 37547d8e6eba87507279ee3dfddfd9dc46335454Affected
  • 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before a365ee556e45f780ee322b349a06efdad0c1458fAffected
  • 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 8cdeb5e482d3fdce7e825444b6ca3865e24c0228Affected
  • 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before a90ce516a73dbe087f9bf3dbf311301a58d125c6Affected
  • 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 088c5098ec6d6b0396edfbf3dad3e81de8469c1cAffected
  • 7ae3aaf53f1695877ccd5ebbc49ea65991e41f1e to before 0b67c8fc10b13a9090340c5f8a37d308f4e1571cAffected
  • bfc8be6593097cb074d3912ba2f27565cfbb7d6eAffected
  • a15859f9d8396cce7c55ccdb7e75f70f14cbc349Affected
  • 4.4.34 to before 4.5Affected
  • 4.8.10 to before 4.9Affected
LinuxLinux
  • 4.9Affected
  • before 4.9Not affected
  • 5.4.301 through 5.4.*Not affected
  • 5.10.246 through 5.10.*Not affected
  • 5.15.195 through 5.15.*Not affected
  • 6.1.156 through 6.1.*Not affected
  • 6.6.112 through 6.6.*Not affected
  • 6.12.53 through 6.12.*Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.