CVE-2025-39758

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw was discovered in the Linux kernel’s RDMA/siw subsystem, specifically within the siw tcp sendpages function. The issue involves an incorrect byte count being used in sendmsg calls, leading to oversized iov iters. This bug was previously benign but has recently caused out-of-bounds crashes due to changes in the slab allocator that disallow sendpage on large kmalloc allocations. The problem arises from discrepancies in iov iter behavior between the MSG SPLICE PAGES and regular copy paths.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.