CVE-2025-40216

medium

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of it.

References

https://git.kernel.org/stable/c/f16769241594be59387b56ab525e327f54377e60

https://git.kernel.org/stable/c/50998b0ae7d9d552e96d8b7239981cf05f65eff5

https://git.kernel.org/stable/c/3a3c6d61577dbb23c09df3e21f6f9eda1ecd634b

Details

Source: Mitre, NVD

Published: 2025-12-04

Updated: 2026-04-15

Risk Information

CVSS v2

Base Score: 6

Vector: CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 6.7

Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Severity: Medium

EPSS

EPSS: 0.00017