CVE-2025-40117
High
Description
In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl() Commit eefb83790a0d ("misc: pci_endpoint_test: Add doorbell test case") added NO_BAR (-1) to the pci_barno enum which, in practical terms, changes the enum from an unsigned int to a signed int. If the user passes a negative number in pci_endpoint_test_ioctl() then it results in an array underflow in pci_endpoint_test_bar().
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linux6df3687922570f753574c40b35e83b26b32292d0, 1ad82f9db13d85667366044acdfb02009d576c5a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | eefb83790a0dda112d1755e4f5e213738d717e76 ≤ v < 6df3687922570f753574c40b35e83b26b32292d0, eefb83790a0dda112d1755e4f5e213738d717e76 ≤ v < 1ad82f9db13d85667366044acdfb02009d576c5a, 6.17 | 6df3687922570f753574c40b35e83b26b32292d0, 1ad82f9db13d85667366044acdfb02009d576c5a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.