CVE-2025-40293

CVE-2025-40293

published December 8, 2025

CVSS
—
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Don't overflow during division for dirty tracking

If pgshift is 63 then BITS_PER_TYPE(*bitmap->bitmap) * pgsize will overflow

to 0 and this triggers divide by 0.

In this case the index should just be 0, so reorganize things to divide

by shift and avoid hitting any overflows.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Published
2025-12-08T06:16Z
References (5)
EPSS history
Timeline
  • 08 DEC 00:46Z
    iommufd: Don't overflow during division for dirty tracking
    cvelistv5