CVE-2025-40293

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: iommufd: Don't overflow during division for dirty tracking If pgshift is 63 then BITS_PER_TYPE(*bitmap->bitmap) * pgsize will overflow to 0 and this triggers divide by 0. In this case the index should just be 0, so reorganize things to divide by shift and avoid hitting any overflows.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedDec 8, 2025
First seenDec 8, 2025

How to fix

Update
  • Linux Linux07105e61882ff4a7d58db63cc5f9e90c6c60506c, 4c8a4f1d34eced168cc0b3a3dfe7b6dcc2090f69, de7f2c67ceb1941b05b04ac35458a03e93cc57b1, dbf316fc90aa954dcd5440817f4b944627ed63e0, cb30dfa75d55eced379a42fd67bd5fb7ec38555e or later

Affected products

ProductAffected versionsFixed in
Linux Linux58ccf0190d19d9a8a41f8a02b9e06742b58df4a1 ≤ v < 07105e61882ff4a7d58db63cc5f9e90c6c60506c, 58ccf0190d19d9a8a41f8a02b9e06742b58df4a1 ≤ v < 4c8a4f1d34eced168cc0b3a3dfe7b6dcc2090f69, 58ccf0190d19d9a8a41f8a02b9e06742b58df4a1 ≤ v < de7f2c67ceb1941b05b04ac35458a03e93cc57b1, 58ccf0190d19d9a8a41f8a02b9e06742b58df4a1 ≤ v < dbf316fc90aa954dcd5440817f4b944627ed63e0, 58ccf0190d19d9a8a41f8a02b9e06742b58df4a1 ≤ v < cb30dfa75d55eced379a42fd67bd5fb7ec38555e, 6.107105e61882ff4a7d58db63cc5f9e90c6c60506c, 4c8a4f1d34eced168cc0b3a3dfe7b6dcc2090f69, de7f2c67ceb1941b05b04ac35458a03e93cc57b1, dbf316fc90aa954dcd5440817f4b944627ed63e0, cb30dfa75d55eced379a42fd67bd5fb7ec38555e

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.