Riskcovery

CVE-2025-40117

misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl()

State
Published
Severity
7.8 High
Published
Nov 12, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl()

Commit eefb83790a0d ("misc: pci_endpoint_test: Add doorbell test case") added NO_BAR (-1) to the pci_barno enum which, in practical terms, changes the enum from an unsigned int to a signed int. If the user passes a negative number in pci_endpoint_test_ioctl() then it results in an array underflow in pci_endpoint_test_bar().

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • eefb83790a0dda112d1755e4f5e213738d717e76 to before 6df3687922570f753574c40b35e83b26b32292d0Affected
  • eefb83790a0dda112d1755e4f5e213738d717e76 to before 1ad82f9db13d85667366044acdfb02009d576c5aAffected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.