CVE-2025-40031

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the register shm helper() function related to incorrect error handling during a call to iov iter extract pages(). Specifically, a missing case exists where iov iter extract pages() returns a value greater than zero but less than the requested amount of pages. This can lead to a potential NULL pointer dereference when processing input from the TEE IOC SHM REGISTER ioctl call, where portions of the buffer are not mapped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.