CVE-2025-40193
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in proc_write_simdisk A malicious user could pass an arbitrarily bad value to memdup_user_nul(), potentially causing kernel crash. This follows the same pattern as commit ee76746387f6 ("netdevsim: prevent bad user input in nsim_dev_health_break_write()")
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linuxf40405ccfb87b71175f2d5d004c0b8a0aebcc2cf, 151bd88859474cdaccc1e4c8b21fbf72dbba2ab4, d381de7fd4cdc928ede96987dc64b133e6480dd6, a0c2c36d864ef3676b05cfd8c58b72ee3214cb1a, 5d5f08fd0cd970184376bee07d59f635c8403f63 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | b6c7e873daf765e41233b9752083b66442703b7a ≤ v < f40405ccfb87b71175f2d5d004c0b8a0aebcc2cf, b6c7e873daf765e41233b9752083b66442703b7a ≤ v < 151bd88859474cdaccc1e4c8b21fbf72dbba2ab4, b6c7e873daf765e41233b9752083b66442703b7a ≤ v < d381de7fd4cdc928ede96987dc64b133e6480dd6, b6c7e873daf765e41233b9752083b66442703b7a ≤ v < a0c2c36d864ef3676b05cfd8c58b72ee3214cb1a, b6c7e873daf765e41233b9752083b66442703b7a ≤ v < 5d5f08fd0cd970184376bee07d59f635c8403f63, 3.9 | f40405ccfb87b71175f2d5d004c0b8a0aebcc2cf, 151bd88859474cdaccc1e4c8b21fbf72dbba2ab4, d381de7fd4cdc928ede96987dc64b133e6480dd6, a0c2c36d864ef3676b05cfd8c58b72ee3214cb1a, 5d5f08fd0cd970184376bee07d59f635c8403f63 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.