CVE-2025-40114

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the iio component. The issue involves an out-of-bounds access in the veml6075 read int time ms function, where the index calculated by veml6075 read int time index can range from 0 to 7, but the array veml6075 it ms only contains 5 elements. This could lead to an out-of-bounds read. The fix adds a check to prevent this issue, hardening against potentially broken hardware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.