CVE-2025-39940

medium

Description

In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripe_io_hints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits->io_min and limits->io_opt;

References

https://git.kernel.org/stable/c/f8f64254bca5ae58f3b679441962bda4c409f659

https://git.kernel.org/stable/c/ee27658c239b27721397f3e4eb16370b5cce596e

https://git.kernel.org/stable/c/1071d560afb4c245c2076494226df47db5a35708

Details

Source: Mitre, NVD

Published: 2025-10-04

Updated: 2025-10-06

Risk Information

CVSS v2

Base Score: 5.2

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:P/A:C

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Severity: Medium

EPSS

EPSS: 0.00017