CVE-2025-40009

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc6

Description The Linux kernel contains a flaw within the fs/proc/task mmu component. Specifically, a null pointer dereference can occur in pagemap scan backout range() when the PAGEMAP SCAN ioctl is called with vec len set to 0. This condition leads to a kernel panic. The issue arises because p->vec buf remains NULL when vec len is 0, violating an assumption made during later processing. The fix involves explicitly checking p->vec buf for NULL before dereferencing it.

Recommendations Update to a version newer than 6.17.0-rc6.