CVE-2025-40216
High
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of it.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 4, 2025
First seenDec 4, 2025
How to fix
Update
- Linux Linux50998b0ae7d9d552e96d8b7239981cf05f65eff5, f16769241594be59387b56ab525e327f54377e60, 3a3c6d61577dbb23c09df3e21f6f9eda1ecd634b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | a8edbb424b1391b077407c75d8f5d2ede77aa70d ≤ v < 50998b0ae7d9d552e96d8b7239981cf05f65eff5, a8edbb424b1391b077407c75d8f5d2ede77aa70d ≤ v < f16769241594be59387b56ab525e327f54377e60, a8edbb424b1391b077407c75d8f5d2ede77aa70d ≤ v < 3a3c6d61577dbb23c09df3e21f6f9eda1ecd634b, 6.12 | 50998b0ae7d9d552e96d8b7239981cf05f65eff5, f16769241594be59387b56ab525e327f54377e60, 3a3c6d61577dbb23c09df3e21f6f9eda1ecd634b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.