CVE-2025-40008

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc3

Description A flaw exists in the Linux kernel related to out-of-bounds access to shadow memory within the Kernel Memory Sanitizer (KMSAN). Specifically, when running sha224 kunit on a KMSAN-enabled kernel, a crash occurs in kmsan internal set shadow origin(). This is triggered when memset() is called on a buffer that is not 4-byte aligned and extends to the end of a guard page. The root cause is an incorrect calculation of shadow memory addresses within the kmsan internal set shadow origin() function, leading to reads from unmapped shadow memory. The function kmsan internal set shadow origin() is involved in the process.

Recommendations Update to a version of the Linux kernel greater than or equal to 6.17.0-rc3.