PT-2025-46592 · Linux+2 · Linux Kernel+2

CVE-2025-40117

·

Published

2025-08-13

·

Updated

2026-02-24

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the pci endpoint test module. A commit introduced a change that allows for a potential array underflow in the pci endpoint test bar() function when a negative number is passed through the pci endpoint test ioctl() function. This issue stems from a modification to the pci barno enum, which altered its type from unsigned to signed integer.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13791
CVE-2025-40117
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu