CVE-2025-39822

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s io uring/kbuf subsystem related to signedness in the this len calculation. When importing and using buffers, the buf->len value is treated as unsigned. However, it is converted to a signed integer during commitment, potentially leading to unexpected behavior if the buffer size is large enough to be interpreted as a negative value. The issue is addressed by making the min t calculation unsigned.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.