CVE-2025-40040: linux kernel from 4.6 (inclusive), before 5.4.302 (exclusive), from 5.5 (inclusive), before 5.10.247 (exclusive), from…

Affected technology

linux kernel · from 4.6 (inclusive), before 5.4.302 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.247 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.197 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.158 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.114 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.55 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.17.3 (exclusive)
linux

Linux · 63c17fb8e5a46a16e10e82005748837fd11a2024 to before 850f1ea245bdc0ce6a3fd36bfb80d8cf9647cb71, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before 788e5385d0ff69cdba1cabccb9dab8d9647b9239, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before b69f19244c2b6475c8a6eb72f0fb0d53509e48cd, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before 41cb9fd904fe0c39d52e82dd84dc3c96b7aa9693, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before 92b82e232b8d8b116ac6e57aeae7a6033db92c60, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before ac50c6e0a8f91a02b681af81abb2362fbb67cc18, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before 76385629f45740b7888f8fcd83bde955b10f61fe, 63c17fb8e5a46a16e10e82005748837fd11a2024 to before f04aad36a07cc17b7a5d5b9a2d386ce6fae63e93
Linux

Linux · 4.6
Linux

Component: Not specified by the source
File: include/linux/mm.h, rust/bindings/bindings_helper.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.