Get real-time updates on Telegram
CVE-2025-40048: Linux 4.10
CVE-2025-40048. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00644 (percentile 0.4967), scored 14-Oct-2026.
Affected technology
Linux · 95096f2fbd10186d3e78a328b327afc71428f65f to before 540aac117eaea5723cef5e4cbf3035c4ac654d92, 95096f2fbd10186d3e78a328b327afc71428f65f to before 65d40acd911c7011745cbbd2aaac34eb5266d11e, 95096f2fbd10186d3e78a328b327afc71428f65f to before a44f61f878f32071d6378e8dd7c2d47f9490c8f7, 95096f2fbd10186d3e78a328b327afc71428f65f to before 01ce972e6f9974a7c76943bcb7e93746917db83a, 95096f2fbd10186d3e78a328b327afc71428f65f to before 2af39ab5e6dc46b835a52e80a22d0cad430985e3, 95096f2fbd10186d3e78a328b327afc71428f65f to before 37bd91f22794dc05436130d6983302cb90ecfe7e, 95096f2fbd10186d3e78a328b327afc71428f65f to before e29587c07537929684faa365027f4b0d87521e1b, 95096f2fbd10186d3e78a328b327afc71428f65f to before b15b7d2a1b09ef5428a8db260251897405a19496
Linux
Linux · 4.10
Linux
Component: Not specified by the source
File: drivers/uio/uio_hv_generic.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 30.2 /100 (P4)
- CVSS 3.1
- 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
- EPSS
- 0.00644 · percentile 0.4967 · 2026-10-14
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 22:58:54.984414+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-40048.html