CVE-2025-40193

In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in proc_write_simdisk A malicious user could pass an arbitrarily bad value to memdup_user_nul(), potentially causing kernel crash. This follows the same pattern as commit ee76746387f6 ("netdevsim: prevent bad user input in nsim_dev_health_break_write()")

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/151bd88859474cdaccc1e4c8b21fbf72dbba2ab4
https://git.kernel.org/stable/c/5d5f08fd0cd970184376bee07d59f635c8403f63
https://git.kernel.org/stable/c/a0c2c36d864ef3676b05cfd8c58b72ee3214cb1a
https://git.kernel.org/stable/c/d381de7fd4cdc928ede96987dc64b133e6480dd6
https://git.kernel.org/stable/c/f40405ccfb87b71175f2d5d004c0b8a0aebcc2cf

Configurations

No configuration.

History

No history.

Information

Published : 2025-11-12 22:15

Updated : 2026-06-17 09:21

NVD link : CVE-2025-40193

Mitre link : CVE-2025-40193

CVE.ORG link : CVE-2025-40193

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2025-40193", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "b6c7e873daf765e41233b9752083b66442703b7a", "lessThan": "f40405ccfb87b71175f2d5d004c0b8a0aebcc2cf", "versionType": "git"}, {"status": "affected", "version": "b6c7e873daf765e41233b9752083b66442703b7a", "lessThan": "151bd88859474cdaccc1e4c8b21fbf72dbba2ab4", "versionType": "git"}, {"status": "affected", "version": "b6c7e873daf765e41233b9752083b66442703b7a", "lessThan": "d381de7fd4cdc928ede96987dc64b133e6480dd6", "versionType": "git"}, {"status": "affected", "version": "b6c7e873daf765e41233b9752083b66442703b7a", "lessThan": "a0c2c36d864ef3676b05cfd8c58b72ee3214cb1a", "versionType": "git"}, {"status": "affected", "version": "b6c7e873daf765e41233b9752083b66442703b7a", "lessThan": "5d5f08fd0cd970184376bee07d59f635c8403f63", "versionType": "git"}], "programFiles": ["arch/xtensa/platforms/iss/simdisk.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.9"}, {"status": "unaffected", "version": "0", "lessThan": "3.9", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.157", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.113", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.54", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.17.4", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/xtensa/platforms/iss/simdisk.c"], "defaultStatus": "affected"}]}], "published": "2025-11-12T22:15:46.307", "references": [{"url": "https://git.kernel.org/stable/c/151bd88859474cdaccc1e4c8b21fbf72dbba2ab4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5d5f08fd0cd970184376bee07d59f635c8403f63", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a0c2c36d864ef3676b05cfd8c58b72ee3214cb1a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d381de7fd4cdc928ede96987dc64b133e6480dd6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f40405ccfb87b71175f2d5d004c0b8a0aebcc2cf", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxtensa: simdisk: add input size check in proc_write_simdisk\n\nA malicious user could pass an arbitrarily bad value\nto memdup_user_nul(), potentially causing kernel crash.\n\nThis follows the same pattern as commit ee76746387f6\n(\"netdevsim: prevent bad user input in nsim_dev_health_break_write()\")"}], "lastModified": "2026-06-17T09:21:26.210", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}